PHP Vulnerability Responses by Company

Sangoma

Global cloud / infrastructure
Aliases / services
Sangoma / Sangoma Technologies Corporation / Sangoma US Inc. / Digium / FreePBX / PBXact / sangoma.com
Official website
https://sangoma.com

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Listed services and systems

Response status
FreePBX/PBXact 17 update guidance
Response information checked
2026-10-27 Rechecked: 2026-10-27

Business communications and PBX products.

Version 17 should receive PHP security updates. Sangoma recommends migrating version 16 and older to 17; its PHP 7.4 package is offered for testing.

What users should do

Verify updates on version 17. Migrate older versions by restoring a backup into a fresh 17 installation and updating before production use. Restrict web administration to trusted sources meanwhile.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://community.freepbx.org/t/critical-php-security-vulnerabilities-action-required-for-freepbx-and-pbxact/110423Response evidence
  2. Operating entityhttps://portal.sangoma.com/marketing/resources/2406/Sangoma%20Corporate/Terms%20of%20Service%20and%20User%20License%20Agreement/Privacy_Policy.pdfService and operation documentation
Related official sources
  1. PHP2Shell response and scopeOfficial notice
  2. Operating entityOfficial information directory

Comments