CVE-2026-73661: CWE-15: External Control of System or Configuration Setting in FreePBX framework
CVE-2026-73661 is a high-severity vulnerability in the FreePBX Framework module that allows an authenticated user with backup-restore or write access to crafted backup files to disable authentication during restoration. This occurs because the restore process permits restoring the hidden AUTHTYPE setting with the value 'none', bypassing the user interface's removal of this insecure setting. The issue affects FreePBX versions prior to 16.0.47 and 17.0.30 and is fixed in these versions.
AI Analysis
Technical Summary
FreePBX Framework versions prior to 16.0.47 and 17.0.30 contain a vulnerability (CWE-15) where the runRestore() function in amp_conf/htdocs/admin/libraries/Builtin/Restore.php allows a crafted backup to restore the hidden AUTHTYPE configuration setting with the value 'none'. An authenticated user with sufficient backup-restore privileges or write access to backup files can exploit this to disable FreePBX authentication during restoration, bypassing the UI's removal of AUTHTYPE=none. This could lead to unauthorized access or configuration changes. The vulnerability is resolved in FreePBX Framework versions 16.0.47 and 17.0.30.
Potential Impact
An attacker with authenticated backup-restore or write access to backup files can disable authentication on the FreePBX system during restoration by setting AUTHTYPE to 'none'. This effectively bypasses authentication controls, potentially allowing unauthorized access or configuration changes. The vulnerability does not require user interaction and has a network attack vector with low complexity and no privileges required beyond backup-restore access. The CVSS 4.0 score is 8.6 (high severity).
Mitigation Recommendations
This vulnerability is fixed in FreePBX Framework versions 16.0.47 and 17.0.30. Users should upgrade to these or later versions to remediate the issue. No official temporary fixes or workarounds are provided in the available data. Patch status is not explicitly confirmed by vendor advisory content here; therefore, verify with the official FreePBX advisory for current remediation guidance.
CVE-2026-73661: CWE-15: External Control of System or Configuration Setting in FreePBX framework
Description
CVE-2026-73661 is a high-severity vulnerability in the FreePBX Framework module that allows an authenticated user with backup-restore or write access to crafted backup files to disable authentication during restoration. This occurs because the restore process permits restoring the hidden AUTHTYPE setting with the value 'none', bypassing the user interface's removal of this insecure setting. The issue affects FreePBX versions prior to 16.0.47 and 17.0.30 and is fixed in these versions.
CVSS v4.0
Score 8.6high
Affected software
FreePBX
framework
pkg:github/freepbx/frameworkRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
FreePBX Framework versions prior to 16.0.47 and 17.0.30 contain a vulnerability (CWE-15) where the runRestore() function in amp_conf/htdocs/admin/libraries/Builtin/Restore.php allows a crafted backup to restore the hidden AUTHTYPE configuration setting with the value 'none'. An authenticated user with sufficient backup-restore privileges or write access to backup files can exploit this to disable FreePBX authentication during restoration, bypassing the UI's removal of AUTHTYPE=none. This could lead to unauthorized access or configuration changes. The vulnerability is resolved in FreePBX Framework versions 16.0.47 and 17.0.30.
Potential Impact
An attacker with authenticated backup-restore or write access to backup files can disable authentication on the FreePBX system during restoration by setting AUTHTYPE to 'none'. This effectively bypasses authentication controls, potentially allowing unauthorized access or configuration changes. The vulnerability does not require user interaction and has a network attack vector with low complexity and no privileges required beyond backup-restore access. The CVSS 4.0 score is 8.6 (high severity).
Mitigation Recommendations
This vulnerability is fixed in FreePBX Framework versions 16.0.47 and 17.0.30. Users should upgrade to these or later versions to remediate the issue. No official temporary fixes or workarounds are provided in the available data. Patch status is not explicitly confirmed by vendor advisory content here; therefore, verify with the official FreePBX advisory for current remediation guidance.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-08-13T14:04:09.605Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a7e3a17bf8831d539d70450
Added to database: 08/13/2026, 21:41:43 UTC
Last enriched: 08/21/2026, 13:32:21 UTC
Last updated: 09/27/2026, 13:47:47 UTC
Views: 78
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.