CVE-2026-112195: medium-severity vulnerability in FusionPBX
FusionPBX Dialplan Editor dialplan.php os command injection
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
33Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 5.1epss 5.0%
from disclosure to weaponsame day
Published on NVDOct 19
1st PoCSep 4
A flaw has been found in FusionPBX up to 5.4.4/5.5.7/5.6.5. The affected element is an unknown function of the file app/dialplans/resources/classes/dialplan.php of the component Dialplan Editor. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
n/a · FusionPBXpublic PoCs found — 2
githubgithub.com/jasonbernier/Dialplan-Escape-RCE★ 1cve_referencegithub.com/jasonbernier/Dialplan-Escape-RCE/blob/main/exploit.pyunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.