https://vulnerability.circl.lu/sightings/feed 2026-08-29T06:43:20.959311+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/b8dae61c-9a6e-40bc-823d-49abffb8391d/export 2026-08-29T06:43:20.991596+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b8dae61c-9a6e-40bc-823d-49abffb8391d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28209", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/270", "content": "\ud83d\udea8 CVE-2026-28209\nFreePBX is an open source IP PBX. From versions 16.0.17.2 to before 16.0.20 and from version 17.0.2.4 to before 17.0.5, a command injection vulnerability exists in FreePBX when using the ElevenLabs Text-to-Speech (TTS) engine in the recordings module. This issue has been patched in versions 16.0.20 and 17.0.5.\n\nhttps://github.com/FreePBX/security-reporting/security/advisories/GHSA-f558-mp87-58vj", "creation_timestamp": "2026-08-29T00:00:30.265965Z"} 2026-08-29T00:00:30.265965+00:00 https://vulnerability.circl.lu/sighting/330476ef-a4b1-4d27-88f8-2b0198947caf/export 2026-08-29T06:43:20.992936+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "330476ef-a4b1-4d27-88f8-2b0198947caf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28209", "type": "seen", "source": "https://t.me/cve0day/270", "content": "\ud83d\udea8 CVE-2026-28209\nFreePBX is an open source IP PBX. From versions 16.0.17.2 to before 16.0.20 and from version 17.0.2.4 to before 17.0.5, a command injection vulnerability exists in FreePBX when using the ElevenLabs Text-to-Speech (TTS) engine in the recordings module. This issue has been patched in versions 16.0.20 and 17.0.5.\n\nhttps://github.com/FreePBX/security-reporting/security/advisories/GHSA-f558-mp87-58vj", "creation_timestamp": "2026-08-28T00:00:41.617710Z"} 2026-08-28T00:00:41.617710+00:00 https://vulnerability.circl.lu/sighting/071ca3d5-ee05-40e2-a523-735cf2a19438/export 2026-08-29T06:43:20.993029+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "071ca3d5-ee05-40e2-a523-735cf2a19438", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28209", "type": "seen", "source": "https://t.me/cve0day/270", "content": "\ud83d\udea8 CVE-2026-28209\nFreePBX is an open source IP PBX. From versions 16.0.17.2 to before 16.0.20 and from version 17.0.2.4 to before 17.0.5, a command injection vulnerability exists in FreePBX when using the ElevenLabs Text-to-Speech (TTS) engine in the recordings module. This issue has been patched in versions 16.0.20 and 17.0.5.\n\nhttps://github.com/FreePBX/security-reporting/security/advisories/GHSA-f558-mp87-58vj", "creation_timestamp": "2026-08-27T15:00:12.502456Z"} 2026-08-27T15:00:12.502456+00:00