PT-2026-44844 · Freepbx · Freepbx

Mil1200 · CVE-2026-44239 · Published 2026-05-29 · Updated 2026-07-21

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FreePBX versions prior to 16.0.22 FreePBX versions prior to 17.0.5

Description The Dashboard module's getcontent AJAX handler includes PHP files based on user-supplied input without proper path sanitization. By using path traversal sequences such as ../ in the rawname parameter, an attacker can include arbitrary .class.php files from the filesystem. The PHP code within the included file is executed before a class instantiation error occurs.

Recommendations Update to version 16.0.22. Update to version 17.0.5.

Exploit

Fix

Weakness Enumeration

CWE-98

Related Identifiers

CVE-2026-44239

GHSA-HW7V-V2JP-WC4V

Affected Products

Freepbx

References · 5

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44239.json · Exploit
• https://github.com/FreePBX/security-reporting/security/advisories/GHSA-hw7v-v2jp-wc4v · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-44239 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-44239 · Security Note
• https://t.me/cveNotify/208785 · Telegram Post