CVE-2026-28284

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-28284", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-02-26T01:52:58.735Z", "datePublished": "2026-03-05T18:24:50.528Z", "dateUpdated": "2026-03-07T04:55:27.537Z"}, "containers": {"cna": {"title": "FreePBX: Authenticated SQL Injection Vulnerabilities in FreePBX Logfiles Module", "problemTypes": [{"descriptions": [{"cweId": "CWE-89", "lang": "en", "description": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", "type": "CWE"}]}], "metrics": [{"cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "HIGH", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "baseScore": 8.6, "baseSeverity": "HIGH", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "version": "4.0"}}], "references": [{"name": "https://github.com/FreePBX/security-reporting/security/advisories/GHSA-4887-4jwp-327g", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/FreePBX/security-reporting/security/advisories/GHSA-4887-4jwp-327g"}], "affected": [{"vendor": "FreePBX", "product": "security-reporting", "versions": [{"version": "< 16.0.10", "status": "affected"}, {"version": "< 17.0.5", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-03-05T18:24:50.528Z"}, "descriptions": [{"lang": "en", "value": "FreePBX is an open source IP PBX. Prior to versions 16.0.10 and 17.0.5, the FreePBX logfiles module contains several authenticated SQL injection vulnerabilities. This issue has been patched in versions 16.0.10 and 17.0.5."}], "source": {"advisory": "GHSA-4887-4jwp-327g", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-06T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2026-28284"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-07T04:55:27.537Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-28284", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-03-06T15:58:32.780892Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-06T15:58:34.124Z"}}], "cna": {"title": "FreePBX: Authenticated SQL Injection Vulnerabilities in FreePBX Logfiles Module", "source": {"advisory": "GHSA-4887-4jwp-327g", "discovery": "UNKNOWN"}, "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 8.6, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "HIGH", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH"}}], "affected": [{"vendor": "FreePBX", "product": "security-reporting", "versions": [{"status": "affected", "version": "< 16.0.10"}, {"status": "affected", "version": "< 17.0.5"}]}], "references": [{"url": "https://github.com/FreePBX/security-reporting/security/advisories/GHSA-4887-4jwp-327g", "name": "https://github.com/FreePBX/security-reporting/security/advisories/GHSA-4887-4jwp-327g", "tags": ["x_refsource_CONFIRM"]}], "descriptions": [{"lang": "en", "value": "FreePBX is an open source IP PBX. Prior to versions 16.0.10 and 17.0.5, the FreePBX logfiles module contains several authenticated SQL injection vulnerabilities. This issue has been patched in versions 16.0.10 and 17.0.5."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-89", "description": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-03-05T18:24:50.528Z"}}}, "cveMetadata": {"cveId": "CVE-2026-28284", "state": "PUBLISHED", "dateUpdated": "2026-03-07T04:55:27.537Z", "dateReserved": "2026-02-26T01:52:58.735Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-03-05T18:24:50.528Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "security-reporting", "vendor": "FreePBX", "versions": [{"status": "affected", "version": "< 16.0.10"}, {"status": "affected", "version": "< 17.0.5"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:sangoma:freepbx:*:*:*:*:*:*:*:*", "matchCriteriaId": "78DC3E65-C6BC-4F6B-AC45-AA6F4B1C13D4", "versionEndExcluding": "16.0.10", "versionStartIncluding": "16.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:sangoma:freepbx:*:*:*:*:*:*:*:*", "matchCriteriaId": "ADED51B0-38B0-44A5-9116-A07EA67CA59A", "versionEndExcluding": "17.0.5", "versionStartIncluding": "17.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "FreePBX is an open source IP PBX. Prior to versions 16.0.10 and 17.0.5, the FreePBX logfiles module contains several authenticated SQL injection vulnerabilities. This issue has been patched in versions 16.0.10 and 17.0.5."}, {"lang": "es", "value": "FreePBX es una PBX IP de c\u00f3digo abierto. Antes de las versiones 16.0.10 y 17.0.5, el m\u00f3dulo de archivos de registro de FreePBX contiene varias vulnerabilidades de inyecci\u00f3n SQL autenticadas. Este problema ha sido parcheado en las versiones 16.0.10 y 17.0.5."}], "id": "CVE-2026-28284", "lastModified": "2026-06-17T10:28:25.730", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 8.6, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "HIGH", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-28284", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-03-06T00:00:00+00:00", "version": "2.0.3"}}]}, "published": "2026-03-05T19:16:14.867", "references": [{"source": "security-advisories@github.com", "tags": ["Mitigation", "Vendor Advisory"], "url": "https://github.com/FreePBX/security-reporting/security/advisories/GHSA-4887-4jwp-327g"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-89"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,16.0.10)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,17.0.5)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "security-reporting", "source": "cna", "vendor": "FreePBX"}, "product": "security-reporting", "vendor": "freepbx"}], "analysis": {"en": {"generated_at": "2026-04-16T12:16:35.485987+00:00", "value": {"mitigation_remediation": ["Upgrade FreePBX to version 16.0.10 or later, or 17.0.5 or later.", "If an immediate update is not possible, restrict access to the Logfiles module to a minimal set of trusted users and monitor for suspicious activity.", "Apply strong authentication and least\u2011privilege rules across the system to limit the impact of compromised credentials."], "summary": {"action": "Immediate Patch", "impact": "Authenticated SQL injection in the Logfiles module may allow privileged users to read or modify database entries, potentially leading to data exposure, unauthorized configuration changes, or further system compromise."}, "threat_synthesis": {"affected_systems": "FreePBX, an open\u2011source IP PBX platform managed by Sangoma, is affected. The flaw is present in releases prior to version 16.0.10 and 17.0.5, including all earlier 16.0.x and 17.0.x builds. The vulnerable component is the Logfiles module, which is part of the core FreePBX distribution.", "description_and_impact": "The vulnerability resides in the FreePBX Logfiles module, where untrusted input is incorporated into SQL queries without proper sanitization. The flaw permits authenticated users to inject arbitrary SQL commands, enabling the disclosure of sensitive data or modification of database records. Depending on the database and user privileges, an attacker could alter configuration settings, gain elevated privileges, or facilitate further compromise.", "risk_and_exploitability": "The CVSS score of 8.6 classifies this as a high\u2011severity issue. The EPSS score of less than 1% indicates a low probability that the vulnerability is actively exploited in the wild, likely due to its requirement for authenticated access. The flaw does not appear in the CISA Known Exploited Vulnerabilities list. Attackers would need valid credentials and access to the Logfiles module to exploit the injection; thus insider or compromised administrator accounts pose the primary threat vector."}}}}, "created": "2026-03-06T15:01:30.193491+00:00", "updated": "2026-04-16T12:30:06.106876+00:00", "vendors": ["freepbx", "freepbx$PRODUCT$security-reporting"]}