CVE-2026-45562 | FreePBX up to 16.0.3/17.0.5 Music on Hold musiconhold_additional.conf os command injection

September 28, 2026 Yanac

A vulnerability, which was classified as problematic, was found in FreePBX up to 16.0.3/17.0.5. Affected by this issue is some unknown functionality of the file musiconhold_additional.conf of the component Music on Hold. The manipulation results in os command injection.

This vulnerability is identified as CVE-2026-45562. The attack can be executed remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More