Sangoma (FreePBX ) Data Breach

Sangoma (FreePBX ) experienced a data breach that was reported on February 3, 2026. Sangoma FreePBX Endpoint Manager contains an OS command injection vulnerability that could allow for a post-authentication command injection by an authenticated known user via the testconnection -> ch

Key Facts

Organization
Sangoma (FreePBX )
Date Reported
February 3, 2026
Incident Type
unknown
Industry
Technology
Severity Score
5/10
Confidence Level
high

Source

View original source - External link to primary source documentation

Understanding unknown Incidents

Data breaches can result in significant financial, operational, and reputational damage. Organizations should implement defense-in-depth strategies and maintain incident response capabilities.