{"uuid": "330476ef-a4b1-4d27-88f8-2b0198947caf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28209", "type": "seen", "source": "https://t.me/cve0day/270", "content": "\ud83d\udea8 CVE-2026-28209\nFreePBX is an open source IP PBX. From versions 16.0.17.2 to before 16.0.20 and from version 17.0.2.4 to before 17.0.5, a command injection vulnerability exists in FreePBX when using the ElevenLabs Text-to-Speech (TTS) engine in the recordings module. This issue has been patched in versions 16.0.20 and 17.0.5.\n\nhttps://github.com/FreePBX/security-reporting/security/advisories/GHSA-f558-mp87-58vj", "creation_timestamp": "2026-08-28T00:00:41.617710Z"}