What is the official website of FreePBX ?

The official website of FreePBX is https://www.freepbx.org/.

What is FreePBX's cybersecurity risk score?

FreePBX has an AI-generated cybersecurity risk score of 751 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has FreePBX experienced?

According to Rankiteo, FreePBX currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has FreePBX been affected by any supply chain cyber incidents ?

According to Rankiteo, FreePBX has been affected by a supply chain cyber incident involving FreePBX, with the incident ID YASFRE1769690560.

Does FreePBX have SOC 2 Type 1 certification ?

According to Rankiteo, FreePBX is not certified under SOC 2 Type 1.

Does FreePBX have SOC 2 Type 2 certification ?

According to Rankiteo, FreePBX does not hold a SOC 2 Type 2 certification.

Does FreePBX comply with GDPR ?

According to Rankiteo, FreePBX is not listed as GDPR compliant.

Does FreePBX have PCI DSS certification ?

According to Rankiteo, FreePBX does not currently maintain PCI DSS compliance.

Does FreePBX comply with HIPAA ?

According to Rankiteo, FreePBX is not compliant with HIPAA regulations.

Does FreePBX have ISO 27001 certification ?

According to Rankiteo,FreePBX is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does FreePBX operate in ?

FreePBX operates primarily in the Telecommunications industry.

How many employees does FreePBX have ?

FreePBX employs approximately None employees people worldwide.

Does FreePBX own any subsidiaries ?

FreePBX presently has no subsidiaries across any sectors.

How many LinkedIn followers does FreePBX have ?

FreePBX's official LinkedIn profile has approximately 879 followers.

What is the NAICS classification code for FreePBX ?

FreePBX is classified under the NAICS code 517, which corresponds to Telecommunications.

Does FreePBX have a Crunchbase profile ?

No, FreePBX does not have a profile on Crunchbase.

Does FreePBX have a LinkedIn profile ?

Yes, FreePBX maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/freepbx.

How many cybersecurity incidents has FreePBX experienced ?

As of August 25, 2026, Rankiteo reports that FreePBX has experienced 5 cybersecurity incidents.

How many peer or competitor companies does FreePBX have ?

FreePBX has an estimated 10,308 peer or competitor companies worldwide.

What types of cybersecurity incidents has FreePBX faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Vulnerability, Breach and Ransomware.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

FreePBX

Boost Score +25 with badge (5 left)

751

/1000

Fair

776

/1000

Fair

FreePBX Vendor Cyber Rating & Cyber Score

freepbx.org

Add Your Compliance Badge

FreePBX is an open source community. Completely free to download and use, the power of FreePBX comes from a global community of developers who ensure it remains a high compatibility and customizable platform with all the key features needed to build a scalable business phone system on any budget. With millions of installations worldwide and a very active development base, the FreePBX community continues to out-perform the telecom industry’s commercial efforts.

FreePBX A.I CyberSecurity Scoring

Scoring History

FreePBX

FreePBX CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

FreePBX

Vulnerability

100

12/2025

FreePBX

YASFRE176969056...

FreePBX

Vulnerability

8/2025

SAN537082825

FreePBX

Breach

10/2024

SAN233080525

Sangoma

Vulnerability

1/2021

SAN1779287064

FreePBX

Ransomware

100

12/2020

SAN3019222

Loading…

A.I.

FreePBX Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for FreePBX

Incidents vs Telecommunications Industry Avg (This Year)

No incidents recorded for FreePBX in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for FreePBX in 2026.

Incident Types FreePBX vs Telecommunications Industry Avg (This Year)

No incidents recorded for FreePBX in 2026.

Incident History - FreePBX (X = Date, Y = Severity)

Loading…

SUBSIDIARY

FreePBX Subsidiaries

FreePBX

Telecommunications

Website: https://www.freepbx.org/

Company Size: 501-1,000 employees

SangomaTelecommunications

Sangoma InternationalTelecommunications

Asterisk PBXTelecommunications

Sangoma (LATAM)Telecommunications

Loading…

FreePBX Similar Companies

Vodafone

vodafone.com

At Vodafone, our purpose is to connect everyone. From the seabed to the stars, we provide innovative mobile and fixed connectivity solutions to empower our customers across the globe. And we're constantly expanding coverage to bridge continents and spread inclusion, even in the most remote places. When everyone is connected, we can create a future full of possibilities. Find more information at www.vodafone.com #EveryoneConnected

vivo

vivo.com

vivo is a technology company that creates great products based on a design-driven value, with smart devices and intelligent services as its core. The company aims to build a bridge between humans and the digital world. Through unique creativity, vivo provides users with an increasingly convenient mobile and digital life. vivo has over 18,000 employees across the globe. While bringing together and developing the best local talents to deliver excellence, vivo is supported by a network of 10 R&D centers in Shenzhen, Dongguan, Nanjing, Beijing, Hangzhou, Shanghai, Xi'an, Taipei, Tokyo and San Diego, focusing on the development of state-of-the-art consumer technologies, including 5G, artificial intelligence, industrial design, imaging system and other up-and-coming technologies. vivo has also set up 7 production bases (including brand-authorized manufacturing centers), across China, South- and Southeast Asia, and more regions, with an annual production capacity of nearly 200 million smartphones. As of now, vivo has branched out its sales network across more than 60 countries and regions, and is winning more than 400 million users worldwide with its superior products and services. Following the company's core values, which include Benfen, design-driven value, user-orientation, continuous learning and team spirit. vivo has implemented a sustainable development strategy, with the vision of developing into a healthier, more sustainable world-class corporation. Official Site: www.vivo.com/en Facebook: @vivoGlobal Instagram: @vivo_global

Spectrum

spectrum.com

Spectrum is a suite of advanced communications services offered by Charter Communications, Inc. (NASDAQ:CHTR), a leading broadband connectivity company available to more than 57 million homes and small to large businesses across 41 states. Founded in 1993, Charter has evolved from providing cable TV to streaming, and from high-speed Internet to a converged broadband, WiFi and mobile experience. Over the Spectrum Fiber Broadband Network and supported by our 100% U.S.-based employees, the Company offers Seamless Connectivity and Entertainment with Spectrum Internet®, Mobile, TV and Voice products. More information can be found at corporate.charter.com.

Totalplay

cb totalplay.com

Somos una empresa orgullosamente mexicana, líder en tecnología, telecomunicaciones y entretenimiento. Estamos siempre a la vanguardia con el objetivo de llevar a nuestros clientes lo mejor en conectividad, ya sea para que estén cerca de los que más quieren ó puedan alcanzar el éxito profesional gracias a la velocidad que brinda la tecnología de fibra óptica. Nuestro impulso es el equipo que hemos formado, personas con talento, iniciativa, entusiastas y apasionados, que buscan siempre caminar unidos para llevar a más de 20 ciudades de la República Mexicana un servicio de excelencia. Queremos que nuestros clientes sean parte del camino al futuro y vivan al máximo la experiencia de la plataforma de conectividad y entretenimiento total.

Telmex

telmex.com

TELMEX, la empresa líder de telecomunicaciones y servicios TI en México, ha realizado importantes inversiones para desarrollar la plataforma tecnológica más robusta y vanguardista del país, que le permite ofrecer la más amplia gama de soluciones, con los mayores estándares de calidad, seguridad, confiabilidad y competitividad; por ello, es el mejor socio estratégico en servicios avanzados de telecomunicaciones y TI. Las Soluciones TI de TELMEX van desde la Conectividad hasta Servicios de Nube, Centros de Datos, Ciberseguridad, Colaboración y Soluciones de Negocio. Un portafolio enfocado a cubrir las necesidades y proporcionar atención en infraestructura y procesos, lo que permite a los clientes aprovechar al máximo su inversión en tecnología, mientras evolucionan hacia nuevos sistemas y plataformas como servicio. TELMEX permite desarrollar e implementar proyectos en empresas de cualquier tamaño y en cualquier vertical de industria, ofreciendo soluciones integrales, innovadoras y de clase mundial, a través de tecnología de punta; brindando conectividad soportada por la mayor cobertura nacional e internacional y anchos de banda que garantizan la continuidad de las operaciones de sus clientes.

airtel

airtel.com

Airtel was founded to provide global connectivity and unlock endless opportunities. Our organization embodies a unique blend of energy, innovation, creativity, dedication, scale, and ownership, all aimed at being limitless. At Airtel, we strive to go beyond our duties to create impactful solutions for our consumers. Our team is highly skilled and constantly growing, actively developing infrastructure to introduce cutting-edge technologies like 5G, IoT, IQ, and Airtel Black. We have successfully launched 5G services in over 5,000 cities and towns nationwide, with 10 million unique customers on the 5G network nationally. Airtel Black is another convenient consumer service that provides combined billing for family and friends under a single bill. We also offer enterprise solutions, including national and international long-distance services for carriers. With a subscriber base exceeding 574 million as of 2023, we are committed to delivering effective products that contribute to the realization of a 'Digital India', enabling millions of individuals to connect and thrive for a brighter future. Our presence spans 7,915 census and 802,577 non-census towns and villages, covering almost 96% of the country's population with 388,726 Rkms of optical fiber and an extensive distribution network of 1.2 million outlets. We've also implemented conservation initiatives that have saved 14,676 MWh of electricity, 4412 tonnes of paper through our e-bill initiatives, and recycled 3330 tonnes of e-waste. At Airtel, we believe in taking early ownership, delivering quality, and experimenting with various career paths to boost our trajectories and gain valuable insights into the business, making us the best in the industry. We are committed to creating the ultimate experience for our consumers while maintaining an ecological balance in the world.

Optus

optus.com.au

Optus is an Australian telecommunications company, delivering more than 11 million services to our customers every day across mobile, broadband and digital solutions. Message our dedicated Social Media Care team at help.optus.com.au/contactus for 24/7 assistance with your account. You can also visit our Contact Us page for other ways to get in touch: optus.com.au/contactus. We monitor public social media mentions of Optus to support customers. Any information you share is handled under our Privacy Policy: optus.com.au/privacy.

Orange

orange.com

Orange is one of the world’s leading telecommunications operators with revenues of 40.3 billion euros in 2024 and 127,000 employees worldwide at 31 December 2024, including 71,000 employees in France. The Group has a total customer base of 291 million customers worldwide at 31 December 2024, including 253 million mobile customers and 22 million fixed broadband customers. The Group is present in 26 countries. Orange is also a leading provider of global IT and telecommunication services to multinational companies under the brand Orange Business. In February 2023, the Group presented its strategic plan « Lead the future », built on a new business model and guided by responsibility and efficiency. « Lead the future » capitalizes on network excellence to reinforce Orange's leadership in service quality.

Telemont

telemont.com.br

Fundada em 1975, a Telemont Engenharia de Telecomunicações S/A é líder na prestação de serviços de implantação, manutenção e operação de redes de telecomunicações. São 7,7 milhões de acessos de voz, 3 milhões de ADSL e dados e 63 mil km de fibra óptica operados pela empresa. Através da Telemont IT - Integração e Tecnologia - a empresa também oferece serviços de tecnologia da informação. Esta unidade de negócios tem o objetivo de complementar os serviços já oferecidos, baseada na expertise de quem já tem 39 anos de mercado e está presente em mais de 15 estados do país. Apesar dessa amplitude territorial, a Telemont tem princípios e valores únicos que norteiam todos os seus colaboradores no dia a dia: A segurança no trabalho, clientes permanentemente satisfeitos, a busca contínua do melhor resultado de forma sustentável, ser um time de alta performance, respeito e simplicidade, excelência em gente e inovação.

Loading…

NEWS

FreePBX CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 02, 2026 08:00 AM

Hundreds of FreePBX instances infected by web shells exploiting command injection vulnerability

The Hacker News reports that hundreds of Sangoma FreePBX instances remain infected with web shells due to ongoing attacks exploiting a...

Read Article

February 27, 2026 08:00 AM

900+ Sangoma FreePBX Instances Compromised in Ongoing Web Shell Attacks

Over 900 FreePBX systems remain infected after CVE-2025-64328 exploitation, now listed in CISA KEV amid active attacks.

Read Article

February 27, 2026 08:00 AM

900 Sangoma FreePBX Instances Infected With Web Shells

Hackers exploited CVE-2025-64328, a FreePBX command injection vulnerability, to infect hundreds of instances with web shells.

Read Article

February 04, 2026 08:00 AM

CISA adds SolarWinds, FreePBX and GitLab vulnerabilities to KEV catalog

As reported by Security Affairs, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added several critical vulnerabilities...

Read Article

February 04, 2026 08:00 AM

CISA Adds Actively Exploited SolarWinds Web Help Desk RCE to KEV Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a critical security flaw impacting SolarWinds Web Help...

Read Article

January 31, 2026 08:00 AM

New Metasploit Modules Target Critical Vulnerabilities in FreePBX, Cacti, and SmarterMail

Metasploit Framework version 6.4.111, deploying seven new exploit modules targeting critical vulnerabilities across widely-used enterprise...

Read Article

January 31, 2026 08:00 AM

Metasploit Releases 7 New Exploit Modules covering FreePBX, Cacti and SmarterMail

The latest update to the Metasploit Framework this week provides a significant enhancement for penetration testers and red teamers,...

Read Article

January 31, 2026 08:00 AM

Metasploit Update Introduces 7 Exploit Modules Affecting Popular Enterprise Platforms

A significant Metasploit Framework update (version 6.4.111) featuring seven new exploit modules that target critical vulnerabilities across...

Read Article

January 29, 2026 08:00 AM

Hackers Exploiting FreePBX Vulnerability to Deploy Webshell and Gain Control of Systems

A sophisticated attack campaign leveraging a critical FreePBX vulnerability to deploy a persistent webshell dubbed "EncystPHP," enabling...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-53532

SUMMARY

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a crafted HTJ2K-compressed EXR file causes an unconditional process abort in any application that calls exr_start_read() on untrusted input, resulting in denial of service. The crash is triggered by a QCD marker whose lower five bits are zero, which OpenEXR passes into the vendored OpenJPH library while constructing the codestream and evaluating its quantization delta parameters. OpenJPH uses an assertion rather than a recoverable error to validate those bits, so any invalid value calls abort() directly and cannot be intercepted by surrounding error handling, a problem compounded by OpenEXR wrapping only its internal HT header parser in error handling while leaving the later codestream read and construction calls unprotected. This issue has been resolved in version 3.4.13.

Published

Date2026-08-24

Updated

Date2026-08-24

RISK INFORMATION (Score: )

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-78435

SUMMARY

A vulnerability has been found in Faveo Helpdesk up to 2.0.3. Affected is the function unlink of the file app/Http/Controllers/Admin/helpdesk/SettingsController.php of the component Logo Handler. Such manipulation of the argument data1 leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-24

Updated

Date2026-08-24

RISK INFORMATION (Score: 3.8)

cvss2

Base Score: 4.7

Complexity: LOW

AV:N/AC:L/Au:M/C:N/I:P/A:P

cvss3

Base Score: 3.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L

cvss4

Base Score: 2.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.5

Exploitability

1.2

REFERENCES

CVE-2026-78434

SUMMARY

A flaw has been found in Faveo Helpdesk up to 2.0.3. This impacts the function FormController::post_ticket_reply of the file app/Http/Controllers/Client/helpdesk/FormController.php of the component post-ticket-reply Endpoint. This manipulation causes missing authentication. The attack can be initiated remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-24

Updated

Date2026-08-24

RISK INFORMATION (Score: 6.5)

cvss2

Base Score: 6.4

Complexity: LOW

AV:N/AC:L/Au:N/C:N/I:P/A:P

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

cvss4

Base Score: 5.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.5

Exploitability

3.9

REFERENCES

CVE-2026-78284

SUMMARY

Unauthenticated Arbitrary File Deletion in MasterStudy LMS <= 3.7.42 versions.

Published

Date2026-08-24

Updated

Date2026-08-24

RISK INFORMATION (Score: 8.6)

cvss3

Base Score: 8.6

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Impact Score

Exploitability

3.9

REFERENCES

https://patchstack.com/database/wordpress/plugin/masterstudy-lms-learning-management-system/vulnerability/wordpress-masterstudy-lms-plugin-3-7-42-arbitrary-file-deletion-vulnerability?_s_id=cve

CVE-2026-78282

SUMMARY

Unauthenticated Cross Site Scripting (XSS) in Stripe Payments <= 2.1.2 versions.

Published

Date2026-08-24

Updated

Date2026-08-24

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Impact Score

3.7

Exploitability

2.8

REFERENCES

https://patchstack.com/database/wordpress/plugin/stripe-payments/vulnerability/wordpress-stripe-payments-plugin-2-1-2-cross-site-scripting-xss-vulnerability?_s_id=cve

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…