THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2026-73660 — FreePBX is an open source IP PBX. Prior to 16.0.6 and 17.0.5.4, the FreePBX Text-To-Speech module allows an authenticated administrator to save a TTS destination name that is HTML-encoded for storage, decoded during dialplan generation, passed as an AGI argument, and used to buil

[NVD] CVE-2026-73660 — FreePBX is an open source IP PBX. Prior to 16.0.6 and 17.0.5.4, the FreePBX Text-To-Speech module allows an authenticated administrator to save a TTS destination name that is HTML-encoded for storage, decoded during dialplan generation, passed as an AGI argument, and used to buil

lownvdPublished 2026-08-13

CVE-2026-73660 CVSS: None Published: 2026-08-13T22:17:27.480

FreePBX is an open source IP PBX. Prior to 16.0.6 and 17.0.5.4, the FreePBX Text-To-Speech module allows an authenticated administrator to save a TTS destination name that is HTML-encoded for storage, decoded during dialplan generation, passed as an AGI argument, and used to build filenames inside agi-bin/propolys-tts.agi. The TTS dest

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-73660