#command-injection

900+ Sangoma FreePBX Servers Compromised via Web Shell Exploitation

Over 900 Sangoma FreePBX instances are currently infected with web shells following a command injection campaign first observed in late 2025.