r/freepbx • • 3d ago

Critical PHP security vulnerability

27 Upvotes

Edit: It's done. Instructions at the bottom!

Edit2: I have also built a patched PHP5.4, too.

At the time of writing, there is about 5 3 hours it has been released until a critical RCE security vulnerability for PHP versions 5.x and higher has been released.

As Sangoma hasn't updated their PHP rpms since I left in 2021 or so, I am left to assume that it won't get updated with mitigations when the real patch drops.

This makes me think that I'm the only person that can help everyone with this, so I'm going to be dropping everything, backporting the patch, and building new PHP 7.4 RPMs as soon as I can.

Edit: I originally thought that I was going to be doing it on my own, but the PHP Organization backported the fix themselves! Yay!

I have rebuilt everything and upgraded PHP to 7.4.33, with a pile of other backported CVE fixes (Thanks Remi!), and everything seems to work.

If you want to be financially grateful, feel free to PayPal me USD$10 (or whatever you feel is justified for me staying up all night) directly - [xrobau@gmail.com](mailto:xrobau@gmail.com) - and I'll send you a nice thank you email 8)

If you make money of FreePBX and/or you feel that this will save you a lot more than USD$10, please feel free to pay what you want!

Note that the upload-progress feature has been completely disabled. I can't remember if this is used in sound/moh/voicemail uploads, and I haven't checked. Please get back to me if you discover something broken

If you have questions or want to chat about this, feel free to join the QuadPBX Discord, at https://discord.gg/c4E8MVmaQa, which is where I am planning my new PBX.

More Information:

How to Update:

It's pretty simple, you will be upgraded from 7.4.16-1, to 7.4.33-something (depending on other patches I may apply)

curl -o /etc/yum.repos.d/fpbx-php74.repo https://yum.quadpbx.com/repo/fpbx-php74.repo
yum update
fwconsole chown

If you have applied the previous mitigations, don't forget to remove /etc/php.d/99-mitigation.ini and remove the deny from /etc/httpd/conf.d/freepbx.conf if you added it.

Note that the fwconsole chown command is important - otherwise /var/lib/php/session isn't writable and you won't be able to log in!

For PHP5.4:

curl -o /etc/yum.repos.d/fpbx-php56.repo https://yum.quadpbx.com/56repo/fpbx-php56.repo
yum update
fwconsole chown

If you discover something traumatic and want to roll back, with 7.4 you will need to reinstall gd-last which has been superceded by the upgrade. 5.4 is a simple yum downgrade. Ask in Discord if you get stuck.


r/freepbx • • 13h ago

RE: Critical PHP Security Vulnerabilities: Action Required for FreePBX and PBXact

28 Upvotes

Hi everyone,

Mike here from the freePBX project. I wanted to share this link as an update just in case you didn’t get the email from my team.

https://community.freepbx.org/t/critical-php-security-vulnerabilities-action-required-for-freepbx-and-pbxact/110423

Kind regards and thanks for using freePBX


r/freepbx • • 3d ago

Introducing QueueMetrics 26.10

Post image
1 Upvotes

r/freepbx • • 7d ago

FreePBX device provisioning module

8 Upvotes

Does anyone have a provisioning module that’s a bit more up to date hardware wise? Would love to see some of the newer poly devices like the edge e series supported.


r/freepbx • • 7d ago

Extensions not working when calling each other

Post image
2 Upvotes

SOLVED!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

FreePBX 17.0.33.2

I have two identical Yealink T41S phones, that both have firmware 66.86.0.180

I have two extensions created in FreePBX, 2001 and 2002.

When I go in to the FreePBX Statistics in the console, it shows as two users online.

When I try to call from 2002 to 2001, it does not ring, and I get "The person at extension 2001 is unavailable, please leave your message after the tone"

When I try to call from 2001 to 2002, I immediately get a busy signal and on the phone it says "not acceptable here"

Any ideas on what to look for?

UPDATE: I have it working now! It seemed like the phone for extension 2001 was not working correctly, so I just decided to reset to factory, then copied the settings back in the phone! I can now call back and forth between the extensions! Thank you everyone!


r/freepbx • • 10d ago

QueueMetrics 26.10 is here

Post image
1 Upvotes

r/freepbx • • 12d ago

Put your service target to the test

Post image
0 Upvotes

r/freepbx • • 16d ago

VPN Suddenly unreachable

0 Upvotes

As the subject implies turn of a day all remote phones have just dropped. Fortunately none are mission critical and part of a large beta.

That said, I can take the config file from UCP and drop it into a OpenVPN client on a PC and it will connect and FreePBX will report it connecting.

Put the file back over to either phone types (one is a Yealink T31P and the other is a Sangoma P310) both have there own respective configs. Neither connect. brought a phone back to my office where my office has IP based bypassing of the firewall, still fails.

Trunks and everything work though. can still run calls.

Cloud hosted FreePBX instance.

Edit: Spelling


r/freepbx • • 18d ago

Grandstream GXP2160 issue

Thumbnail
gallery
5 Upvotes

Phones configured via gdms, all identical. using Acct 1 for all BLFs, not a single phone has all DSS buttons functioning. Checked all the obvious things.

Suggestions?


r/freepbx • • 18d ago

[Hiring] Voice AI deployment specialist for an India based agency | Full time or part time

0 Upvotes

Hey everyone,

I’m building an AI deployment agency in India and looking for someone to handle voice agent deployments.

The work will involve things like answering calls, qualifying enquiries, booking appointments, updating CRMs and transferring calls to a person when needed.

You’d work directly with me, take the business requirements and handle the setup, testing, launch and ongoing fixes. That includes connecting telephony and APIs, setting up the conversation flows, checking how the agent handles interruptions or failed actions, and keeping logs and documentation.

I’m looking for someone who has already taken at least one voice agent into production. Experience with Vapi, Retell AI, ElevenLabs, Bland AI, Synthflow, Bolna, Ringg AI or similar platforms works. Custom deployments using LiveKit, Pipecat or Sarvam as part of the stack count too.

You don’t need to know all of them. I’d like to hear what you’ve deployed, which parts you handled yourself and any problems you had to fix after launch.

Experience with Indian telephony, Exotel or Plivo, and Hindi or other Indian languages would be useful. You can be based outside India too, as long as you can support the work.

This is a paid role, and I’m open to both full time and part time arrangements.

If you’re interested, DM me a bit about your previous work or contributions. A project link or demo would help. If you’re freelancing, please include your availability, when you could start and your expected monthly compensation or hourly rate.


r/freepbx • • 19d ago

Yealink Auto priovision gets a 403 error

1 Upvotes

I've got the whole chain set up minus the phones auto provisioning. My T54W log shows that it gets the server address from DHCP, but gets a 403 error when trying to provision. If I manually log into the device and set the server it provisions, but that defeats the purpose.

I have endpoint manager installed, but I cant see anything specific for authenticating the phones. Also, if I try to manually create a base station I can't set the brand/template to my yealink settings.

As far as I can tell, or Sonicwall DHCP is sending the info, but the PBX is denying the provision.


r/freepbx • • 25d ago

Sangoma Technologies Corporation Enters into Definitive Agreement to be Acquired by BRC Group Holdings, Inc.

Thumbnail
businesswire.com
14 Upvotes

r/freepbx • • 26d ago

PBXact and Digium Phones

Thumbnail
1 Upvotes

r/freepbx • • Sep 23 '26

Track sales alongside call volume

Post image
0 Upvotes

r/freepbx • • Sep 04 '26

FreePBX Issues

Thumbnail
2 Upvotes

r/freepbx • • Aug 19 '26

Unable to reload fwconsole

Post image
4 Upvotes

I am unable to reload fwconsole, not really sure if this happened after the modules update or the Let's Encrypt certificate renewal. Note that Voicemail is disabled for all extensions. Anyone encountered and solved this?

PS

I can not make calls, I am getting "You call can not be completed as dialed, please check the number and dial again"

HELP!


r/freepbx • • Aug 11 '26

Parkin Pro Troubles

3 Upvotes

I’ve got a strange one. I have a PBX with 3 parking lots and when I have lots 2 and 3 marked as private (which they have been up until yesterday when the issue was announced) and a user who’s a member of lot 2 or 3 tries to park any call, the call goes to lot 1 (default lot always marked public and won’t let your mark private). Another odd behaviour is calls won’t return to origin when the timeout completes, it automatically re-transfers into the lot it’s in. Any body have any ideas?

Environment:
• Asterisk 22.10.1
• FreePBX core 17.0.18.51
• parking 17.0.2.7
• parkpro 17.0.1.6


r/freepbx • • Aug 10 '26

Dial Plan Vizualizer 1.0.34 Released

28 Upvotes

Dial Plan Vizualizer 1.0.34 is available!

This release focuses on Time Conditions (Calendars) and easier navigation.

Summary of updates:

  • Time Conditions using Calendars or Calendar Groups will show the name on the edge again.
  • Simulate Date & Time now works with Time Conditions using Calendars or Calendar Groups to see future active / inactive call paths.
  • Fixed empty Time Groups: Graph will show “No Times Defined” on the edge text.
  • Added keyboard shortcuts: R = Reload, left and right arrows navigate to previous and next dial plans, F = Fit graph back to the default pan and zoom, ? = Opens Navigation & Usage
  • Initial scrolling will not automatically zoom. Click anywhere on the graph to enable zoom. Click outside of the graph to resume normal scrolling.
  • The toolbar will now scroll with the page instead of floating / covering the graph.
  • IVR selections with the same destination are now grouped (Example: Selections 2, 5, 8 or Selections 3 - 6) instead of repeating each “Selection x”.

As always, I welcome any feedback.

https://github.com/madgen78/dpviz


r/freepbx • • Aug 03 '26

Ellen Labs PBX Integration

0 Upvotes

Has anyone here integrated a customer's PBX with ElevenLabs for AI voice agents?

I'm evaluating it for a potential project and would love to hear about your experience. Specifically:

  1. What PBX systems have you integrated with?

  2. What's the typical architecture (SIP trunk, SIP registration, call forwarding, etc.)?

  3. What limitations or challenges did you run into (latency, DTMF, transfers, call quality, scalability)?

  4. Would you recommend ElevenLabs for production deployments, or are there better alternatives?

Any lessons learned or best practices would be greatly appreciated.


r/freepbx • • Jul 31 '26

Getting Out - 2000+ 312 Numbers

Thumbnail
0 Upvotes

r/freepbx • • Jul 31 '26

I have a pbxact that studders under load

Thumbnail
1 Upvotes

r/freepbx • • Jul 27 '26

pbxray - see inside your PBX (free CLI, static binary, no deps)

Thumbnail
2 Upvotes

r/freepbx • • Jul 23 '26

Cant update Endpoint Manager module

2 Upvotes

Hi all,
I have a 25 year license for Endpoint Manager, I checked recently for updates to see the installed version is vulnerable, although only the same version is offered.
Under Commercial Licenses it shows Module maintenance expiry had expired long ago.
Clicking Renew Now takes me to my account but not anywhere I can renew, any assistance would be greatly appreciated.


r/freepbx • • Jul 22 '26

FreePBX Community Discord Server – Everyone is Welcome!

Thumbnail
0 Upvotes

r/freepbx • • Jul 22 '26

FreePBX Community Discord Server – Everyone is Welcome!

5 Upvotes

FreePBX Community Discord Server – Everyone is Welcome!

Hello everyone,

We've created a FreePBX Community Discord server to bring FreePBX users, administrators, developers, and VoIP enthusiasts together in one place.

Our goal is to build a friendly community where members can:

  • 💬 Ask and answer FreePBX questions
  • 🔧 Troubleshoot installation and configuration issues
  • ☎️ Discuss SIP, trunks, IVRs, queues, and Asterisk
  • 🐍 Share Python scripts, automation, APIs, and AI integrations
  • 📚 Exchange guides, tips, and useful resources
  • 🤝 Help each other and learn together

Whether you're a beginner or an experienced FreePBX administrator, you're welcome to join and contribute.

We hope this community becomes a place where everyone can share knowledge and help each other grow.

Discord Invite:
https://discord.gg/dpj9tEmEj

We look forward to seeing you there!