CVE-2026-46376

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

May 20, 2026

Last Seen

May 20, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical FreePBX Vulnerability Exposes User Portals to Attackers72.6

A critical vulnerability in FreePBX, tracked as CVE-2026-46376, allows unauthenticated attackers to access user portals via the User Control Panel (UCP). This flaw arises from hard-coded credentials in the userman module and affects FreePBX versions prior to 16.0.45 and 17.0.7. Systems running outda...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical FreePBX Vulnerability Exposes User Portals to Attackers

May 20·3 sources

Related Entities

Data Breach CWE-287 - Improper Authentication CWE-798 - Use of Hard-coded Credentials T1190 - Exploit Public-Facing Application FreePBX

CVE-2026-46376

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Public Exploits

CVE Details

Related Clusters (1)

Critical FreePBX Vulnerability Exposes User Portals to Attackers

Related Articles (2)

FreePBX Vulnerability Allow Attackers to Gain Access to User Portals

FreePBX Security Flaw Lets Attackers Access User Portals

Related Entities