https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 29 Aug 2026 06:43:20 +0000 https://vulnerability.circl.lu/sighting/b8dae61c-9a6e-40bc-823d-49abffb8391d/export {"uuid": "b8dae61c-9a6e-40bc-823d-49abffb8391d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28209", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/270", "content": "\ud83d\udea8 CVE-2026-28209\nFreePBX is an open source IP PBX. From versions 16.0.17.2 to before 16.0.20 and from version 17.0.2.4 to before 17.0.5, a command injection vulnerability exists in FreePBX when using the ElevenLabs Text-to-Speech (TTS) engine in the recordings module. This issue has been patched in versions 16.0.20 and 17.0.5.\n\nhttps://github.com/FreePBX/security-reporting/security/advisories/GHSA-f558-mp87-58vj", "creation_timestamp": "2026-08-29T00:00:30.265965Z"} {"uuid": "b8dae61c-9a6e-40bc-823d-49abffb8391d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28209", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/270", "content": "\ud83d\udea8 CVE-2026-28209\nFreePBX is an open source IP PBX. From versions 16.0.17.2 to before 16.0.20 and from version 17.0.2.4 to before 17.0.5, a command injection vulnerability exists in FreePBX when using the ElevenLabs Text-to-Speech (TTS) engine in the recordings module. This issue has been patched in versions 16.0.20 and 17.0.5.\n\nhttps://github.com/FreePBX/security-reporting/security/advisories/GHSA-f558-mp87-58vj", "creation_timestamp": "2026-08-29T00:00:30.265965Z"} https://vulnerability.circl.lu/sighting/b8dae61c-9a6e-40bc-823d-49abffb8391d/export Sat, 29 Aug 2026 00:00:30 +0000 https://vulnerability.circl.lu/sighting/330476ef-a4b1-4d27-88f8-2b0198947caf/export {"uuid": "330476ef-a4b1-4d27-88f8-2b0198947caf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28209", "type": "seen", "source": "https://t.me/cve0day/270", "content": "\ud83d\udea8 CVE-2026-28209\nFreePBX is an open source IP PBX. From versions 16.0.17.2 to before 16.0.20 and from version 17.0.2.4 to before 17.0.5, a command injection vulnerability exists in FreePBX when using the ElevenLabs Text-to-Speech (TTS) engine in the recordings module. This issue has been patched in versions 16.0.20 and 17.0.5.\n\nhttps://github.com/FreePBX/security-reporting/security/advisories/GHSA-f558-mp87-58vj", "creation_timestamp": "2026-08-28T00:00:41.617710Z"} {"uuid": "330476ef-a4b1-4d27-88f8-2b0198947caf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28209", "type": "seen", "source": "https://t.me/cve0day/270", "content": "\ud83d\udea8 CVE-2026-28209\nFreePBX is an open source IP PBX. From versions 16.0.17.2 to before 16.0.20 and from version 17.0.2.4 to before 17.0.5, a command injection vulnerability exists in FreePBX when using the ElevenLabs Text-to-Speech (TTS) engine in the recordings module. This issue has been patched in versions 16.0.20 and 17.0.5.\n\nhttps://github.com/FreePBX/security-reporting/security/advisories/GHSA-f558-mp87-58vj", "creation_timestamp": "2026-08-28T00:00:41.617710Z"} https://vulnerability.circl.lu/sighting/330476ef-a4b1-4d27-88f8-2b0198947caf/export Fri, 28 Aug 2026 00:00:41 +0000 https://vulnerability.circl.lu/sighting/071ca3d5-ee05-40e2-a523-735cf2a19438/export {"uuid": "071ca3d5-ee05-40e2-a523-735cf2a19438", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28209", "type": "seen", "source": "https://t.me/cve0day/270", "content": "\ud83d\udea8 CVE-2026-28209\nFreePBX is an open source IP PBX. From versions 16.0.17.2 to before 16.0.20 and from version 17.0.2.4 to before 17.0.5, a command injection vulnerability exists in FreePBX when using the ElevenLabs Text-to-Speech (TTS) engine in the recordings module. This issue has been patched in versions 16.0.20 and 17.0.5.\n\nhttps://github.com/FreePBX/security-reporting/security/advisories/GHSA-f558-mp87-58vj", "creation_timestamp": "2026-08-27T15:00:12.502456Z"} {"uuid": "071ca3d5-ee05-40e2-a523-735cf2a19438", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28209", "type": "seen", "source": "https://t.me/cve0day/270", "content": "\ud83d\udea8 CVE-2026-28209\nFreePBX is an open source IP PBX. From versions 16.0.17.2 to before 16.0.20 and from version 17.0.2.4 to before 17.0.5, a command injection vulnerability exists in FreePBX when using the ElevenLabs Text-to-Speech (TTS) engine in the recordings module. This issue has been patched in versions 16.0.20 and 17.0.5.\n\nhttps://github.com/FreePBX/security-reporting/security/advisories/GHSA-f558-mp87-58vj", "creation_timestamp": "2026-08-27T15:00:12.502456Z"} https://vulnerability.circl.lu/sighting/071ca3d5-ee05-40e2-a523-735cf2a19438/export Thu, 27 Aug 2026 15:00:12 +0000