tts vulnerabilities

2 known vulnerabilities in tts from FreePBX. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  tts: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-73660Aug 13, 2026FreePBX

  FreePBX is an open source IP PBX. Prior to 16.0.6 and 17.0.5.4, the FreePBX Text-To-Speech module allows an authenticated administrator to save a TTS destination name that is HTML-encoded for storage, decoded during dialplan generation, passed as an AGI argume

• 7.2 High severity

  tts: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-67736Dec 16, 2025FreePBXEPSS 6.43%

  The FreePBX module tts (Text to Speech) for FreePBX, an open-source web-based graphical user interface (GUI) that manages Asterisk. Versions prior to 16.0.5 and 17.0.5 are vulnerable to SQL injection by authenticated users with administrator access. Authentica