CVE-2026-73663 | FreePBX up to 16.0.10/17.0.3 missedcall module missedcallnotify.php sql injection

A vulnerability, which was classified as critical, has been found in FreePBX up to 16.0.10/17.0.3. The affected element is an unknown function of the file agi-bin/missedcallnotify.php of the component missedcall module. Performing a manipulation results in sql injection.

This vulnerability is identified as CVE-2026-73663. The attack can be initiated remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More