PT-2026-42119 · Freepbx · Freepbx

Published 2026-05-20 · Updated 2026-05-22 · CVE-2026-46376

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions FreePBX (affected versions not specified)

Description Hardcoded credentials in the Userman module allow unauthenticated access to the portal, potentially exposing business phone systems.

Recommendations Update the installed modules to the latest version.

Related Identifiers

CVE-2026-46376

Affected Products

Freepbx

References · 7

• https://twitter.com/DIYprojects55/status/2057188996271448439 · Twitter Post
• https://reddit.com/r/KibernetinisSaugumas/comments/1tjs758/kibernetinio_saugumo_radar_20260521 · Reddit Post
• https://pbxscience.com/freepbx-user-management-hit-by-critical-hard-coded-credentials-flaw · Reddit Post
• https://twitter.com/vuln_tracker/status/2057640908552867994 · Twitter Post
• https://twitter.com/the_yellow_fall/status/2056937334898389329 · Twitter Post
• https://twitter.com/UndercodeNews/status/2057043477196636482 · Twitter Post
• https://twitter.com/fofabot/status/2057406698227404938 · Twitter Post