CVE-2024-58294

HIGH

FreePBX 16 contains an authenticated remote code execution vulnerability in the API module that allows attackers with valid session credentials to execute arbitrary commands. Attackers can exploit ...

Affects 2 products across 2 vendors.

CVSS 3.18.8
CVSS v48.7
EPSS3.6%
Percentile89th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, low privileges required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-78: OS Command Injection

Attacker injects OS commands through application inputs passed to system() or equivalent calls, leading to arbitrary command execution.

Related Attack Patterns (CAPEC)
CAPEC-43 Exploiting Multiple Input Interpretation Layers
via CWE-78
CAPEC-108 Command Line Execution through SQL Injection
via CWE-78
CAPEC-6 Argument Injection
via CWE-78
CAPEC-15 Command Delimiters
via CWE-78
CAPEC-88 OS Command Injection
via CWE-78

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

FreePBX 16 contains an authenticated remote code execution vulnerability in the API module that allows attackers with valid session credentials to execute arbitrary commands through the 'generatedocs' endpoint.

BSID: BS-2025-GLOBAL-223714-H • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2024-58294?
FreePBX 16 contains an authenticated remote code execution vulnerability in the API module that allows attackers with valid session credentials to execute arbitrary commands through the 'generatedocs' endpoint.
What is the CVSS score for CVE-2024-58294?
CVE-2024-58294 has CVSS 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS: 3.6%.
Is CVE-2024-58294 actively exploited?
No confirmed active exploitation of CVE-2024-58294 as of 2026-09-25.
How do I remediate CVE-2024-58294?
Priority: IMMEDIATE.
What systems are affected by CVE-2024-58294?
CVE-2024-58294 affects Freepbx Freepbx; Sangoma Freepbx.
Vulnerability Details
CVE IDCVE-2024-58294
BSIDBS-2025-GLOBAL-223714-H BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published2025-12-11
Last Modified2026-06-17
ICS Relevance15%
Weakness (CWE)
OS Command Injection
SourceNVD
Official Description

FreePBX 16 contains an authenticated remote code execution vulnerability in the API module that allows attackers with valid session credentials to execute arbitrary commands. Attackers can exploit the 'generatedocs' endpoint by crafting malicious POST requests with bash command injection to establish remote shell access.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Attackers can exploit the 'generatedocs' endpoint by crafting malicious POST requests with bash command injection, which can lead to remote shell access.

Exploitation Likelihood: HIGH

Affected Products
VendorProductAffected Versions
Freepbx Freepbx 16
Sangoma Freepbx 16.0
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 308 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
SHA-512 Audit Hashdefbd4c8d623e24b0b73ab42c0017f0e3c4b9eab09b43b8edb6ada92dc20e34f297be04f8ba02906a6b3251acb1d45bab75a73211124ed28ac3d2b2f6265de10
Related CVEs affecting Freepbx
CVE-2014-7235 10.0 htdocs_ari/includes/login.php in the ARI Framework module/Asterisk Recording ... CVE-2026-40520 8.8 FreePBX api module version 17.0.8 and prior contain a command injection vulne... CVE-2023-26566 8.6 Sangoma FreePBX 1805 through 2203 on Linux contains hardcoded credentials for... CVE-2014-1903 7.5 admin/libraries/view.functions.php in FreePBX 2.9 before 2.9.0.14, 2.10 befor... CVE-2007-2191 6.8 Multiple cross-site scripting (XSS) vulnerabilities in freePBX 2.2.x allow re...
View all Freepbx CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →