The Sangoma FreePBX Security Team is warning about an actively exploited FreePBX zero-day vulnerability that impacts systems with the Administrator Control Panel (ACP) is exposed to the internet.

The Web Application, written in Java, is leveraging open-source technologies, specifically MySQL, as a Database, Apache as a Web Server, and CentOS 8.5 as the Operating System. The underlying ...