CVE-2026-73661

Name of the Vulnerable Software and Affected Versions FreePBX versions prior to 16.0.47 FreePBX versions prior to 17.0.30

Description The FreePBX Framework module allows an authenticated user with write access to backup files or sufficient backup-restore permissions to disable authentication. By using a crafted backup, the user can restore the hidden AUTHTYPE setting with the value none via the runRestore() function located in amp conf/htdocs/admin/libraries/Builtin/Restore.php. This process bypasses the user-interface restrictions that normally prevent the removal of AUTHTYPE=none.

Recommendations Update to version 16.0.47. Update to version 17.0.30.