$ cve CVE-2021-43405 JSON

CVE-2021-43405 EXPLOIT

8.8

HIGH · CVSS 3.1 · EPSS 35.6% (pctl 98)

Patch early

A public exploit exists.

An issue was discovered in FusionPBX before 4.5.30. The fax_extension may have risky characters (it is not constrained to be numeric).

CVSS	8.8 (HIGH, v3.1)
Vector	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS	35.63% — more likely to be exploited than 98% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2021-11-05
Last modified	2026-06-17

Vendor	Product
fusionpbx	fusionpbx

Source	Title	Date
exploit-db	FusionPBX 4.5.29 - Remote Code Execution (RCE) (Authenticated)	2021-11-08