CVE-2026-54710 - FreePBX: Authenticated Superfecta Arbitrary PHP Code Execution (RCE via Unsafe File Inclusion)
CVE ID :CVE-2026-54710 Published : Sept. 28, 2026, 6:17 p.m. | 1 hour, 58 minutes ago Description :FreePBX is an open source IP PBX. Prior to versions 16.0.40 and 17.0.7, a critical remote code execution (RCE) vulnerability exists in the superfecta module due to unsafe inclusion of arbitrary...