← Database

CVE-2026-72578

HIGH CVSS: 8.8 Published: 2026-08-10 Modified: 2026-08-10

Description

A cross-site request forgery (CSRF) vulnerability in FreePBX Framework 17.0 allows an unauthenticated remote attacker to perform administrative actions on behalf of an authenticated administrator.

Affected Platforms

Unknown

Weakness Type

CWE-352

References