CVE-2019-16986

In FusionPBX up to v4.5.7, the file resources\download.php uses an unsanitized "f" variable coming from the URL, which takes any pathname and allows a download of it. (resources\secure_download.php is also affected.)

• CWE-22

• https://github.com/fusionpbx/fusionpbx/commit/9482d9ee0e4287df21339be4276125e38e048951Not Applicable
• https://github.com/fusionpbx/fusionpbx/commit/9c61191049c949e01f99ea1fbab1feb44709e108Not Applicable
• https://resp3ctblog.wordpress.com/2019/10/19/fusionpbx-path-traversal-2/Third Party Advisory
• https://github.com/fusionpbx/fusionpbx/commit/9482d9ee0e4287df21339be4276125e38e048951Not Applicable
• https://github.com/fusionpbx/fusionpbx/commit/9c61191049c949e01f99ea1fbab1feb44709e108Not Applicable
• https://resp3ctblog.wordpress.com/2019/10/19/fusionpbx-path-traversal-2/Third Party Advisory

Published

Oct 21, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-16980In FusionPBX up to v4.5.7, the file app\call_broadcast\call_…8.8
• CVE-2019-16981In FusionPBX up to v4.5.7, the file app\conference_profiles\…6.1
• CVE-2019-16982In FusionPBX up to v4.5.7, the file app\access_controls\acce…6.1
• CVE-2019-16983In FusionPBX up to v4.5.7, the file resources\paging.php has…6.1
• CVE-2019-16984In FusionPBX up to v4.5.7, the file app\recordings\recording…6.1
• CVE-2019-16985In FusionPBX up to v4.5.7, the file app\xml_cdr\xml_cdr_dele…6.5
• CVE-2019-16987In FusionPBX up to v4.5.7, the file app\contacts\contact_imp…6.1
• CVE-2019-16988In FusionPBX up to v4.5.7, the file app\basic_operator_panel…6.1
• CVE-2019-16989In FusionPBX up to v4.5.7, the file app\conferences_active\c…6.1
• CVE-2019-1699A vulnerability in the CLI of Cisco Firepower Threat Defense…6.7
• CVE-2019-16990In FusionPBX up to v4.5.7, the file app/music_on_hold/music_…6.5
• CVE-2019-16991In FusionPBX up to v4.5.7, the file app\edit\filedelete.php …6.1