music vulnerabilities

1 known vulnerability in music from FreePBX. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  music: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-73662Aug 13, 2026FreePBX

  FreePBX is an open source IP PBX. From 17.0.1 until 17.0.7, the FreePBX Music on Hold module permits dangerous command-line options for /usr/bin/mpg123 and other allowed players in validateCustomConfiguration() in Music.class.php. An authenticated administrato