fromThe Hacker News
4 hours ago900+ Sangoma FreePBX Instances Compromised in Ongoing Web Shell Attacks
The impact is that any user with access to the FreePBX Administration panel could leverage this vulnerability to execute arbitrary shell commands on the underlying host. An attacker could leverage this to obtain remote access to the system as the asterisk user.
Information security