CVE-2026-44238— FreePBX: Authenticated SQL Injection via ORDER BY in CDR Reports
Possible ATT&CK Techniques 2AI
T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| FreePBX | security-reporting | < 16.0.50 | affected |
>= 17.0.1, < 17.0.11 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-44238
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
FreePBX: Authenticated SQL Injection via ORDER BY in CDR Reports
Source: CVE Program / CVE List V5
Vulnerability Description
FreePBX is an open source IP PBX. Prior to 16.0.50 and 17.0.11, the CDR Reports module page allows SQL injection through the order and sort POST parameters. Authentication with a FreePBX Administration Control Panel account that has CDR section access is required. Full administrator privileges are not needed. This vulnerability is fixed in 16.0.50 and 17.0.11.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Source: CVE Program / CVE List V5
Vulnerability Title
FreePBX SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
FreePBX是FreePBX项目的一套通过GUI（基于网页的图形化接口）配置Asterisk（IP电话系统）的工具。 FreePBX 16.0.50之前版本和17.0.11之前版本存在SQL注入漏洞，该漏洞源于CDR Reports模块页面允许通过order和sort POST参数进行SQL注入，需要具有CDR部分访问权限的FreePBX管理控制面板账户身份验证，无需完全管理员权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| FreePBX | security-reporting | < 16.0.50 | - |
II. Public POCs for CVE-2026-44238
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-44238
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-44238 (1)
Same Patch Batch · FreePBX · 2026-05-29 · 4 CVEs total
| CVE-2026-46376 | FreePBX: Unauthenticated Use of Hard-Coded Credentials Vulnerability in FreePBX UCP Interf | |
| CVE-2026-44239 | FreePBX: Authenticated Local File Inclusion in Dashboard Module | |
| CVE-2026-44237 | FreePBX: Authenticated Access can lead to Subsequent OAuth2 Authentication Bypass in API M |
IV. Related Vulnerabilities
Same product: security-reporting
- CVE-2026-44237
FreePBX: Authenticated Access can lead to Subsequent OAuth2 - CVE-2026-44239
FreePBX: Authenticated Local File Inclusion in Dashboard Mod - CVE-2026-46376
FreePBX: Unauthenticated Use of Hard-Coded Credentials Vulne - CVE-2026-26978
Free PBX backup: Deserialization of Untrusted Data in admin/ - CVE-2026-28287
FreePBX: Authenticated Remote Code Execution via Recordings
Same vendor: FreePBX
- CVE-2026-44237
FreePBX: Authenticated Access can lead to Subsequent OAuth2 - CVE-2026-44239
FreePBX: Authenticated Local File Inclusion in Dashboard Mod - CVE-2026-46376
FreePBX: Unauthenticated Use of Hard-Coded Credentials Vulne - CVE-2026-26978
Free PBX backup: Deserialization of Untrusted Data in admin/ - CVE-2026-40520
FreePBX api module Command Injection via GraphQL
Same weakness: CWE-89
- CVE-2026-16765
CodeAstro Online Classroom loginlinkadmin.php sql injection - CVE-2026-63359
Appriss Insights VINE SQLI - CVE-2026-65761
Joomla Extension - joomshaper.com - Unauthenticated SQL inje - CVE-2026-65532
WordPress Persian Woocommerce SMS plugin <= 7.2.2 - SQL Inje - CVE-2026-65526
WordPress Visualizer plugin <= 4.0.6 - SQL Injection vulnera
V. Comments for CVE-2026-44238
No comments yet