shouldiuse.io

Categories

VERDICT

FusionPBX Review

Depends

Should I use FusionPBX?

Open-source multi-tenant PBX GUI for FreeSWITCH - fusionpbx.com

· 3 weeks ago

A strong free choice if you are an ITSP or IT team with Linux, FreeSWITCH, and SIP skills who wants a self-hosted multi-tenant phone system. Skip it if you want plug-and-play phones or vendor-managed security — a hosted VoIP service is the better buy.

Confidence

Medium. Based on ~20 public sources: Reddit/forum threads, official docs and site, GitHub, and NVD/Exploit-DB.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support quality
  • Security posture

Pricing

Free

Open source (self-hosted)

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
FusionPBX MembershipNot listed in reviewed sources

Best for

  • ITSPs and resellers running hosted multi-tenant PBX
  • IT teams with Linux and SIP experience
  • Budget-driven self-hosters replacing legacy phone systems
  • Hobbyists — it even runs on a Raspberry Pi

Not for

  • Small offices wanting plug-and-play phones
  • Non-technical buyers with no Linux admin
  • Teams needing vendor SLAs and managed updates
  • Anyone unwilling to own PBX security hardening

Gotchas - check before you buy

high

Self-hosted: firewalling, fail2ban, and TLS hardening are entirely your job

high

Older versions have public RCE exploits; run current release and restrict web access

medium

Billing is not built in; expect third-party add-ons like ASTPP

medium

Support quality hinges on paid membership; confirm what your tier includes first

Pros and cons

Pros

  • Free, open-source, full-featured multi-tenant PBX
  • No per-seat license cost, per community reports
  • Light enough to run on a Raspberry Pi
  • Favorite pick in on-prem PBX community threads

Cons

  • History of serious CVEs, including public RCE exploits
  • Setup is involved enough to need lengthy community 'taming' guides
  • Newcomers depend on scattered community resources and forums
  • Community actively recommends newer forks like FS PBX

Sources & method

- 11 sources - Self-hosted software with a track record of CVEs since 2019, including RCE; hardening is the operator's responsibility.

official x4review x4security x2news x1
  • Remote code execution in 4.5.29, Public exploit published for FusionPBX 4.5.29 RCE.
  • CVE-2024-23387, Affects FusionPBX prior to 5.1.0.
  • CVE-2020-21055 directory traversal, Publicly disclosed directory traversal vulnerability.
  • Operator Panel command execution, Public Metasploit module targets command execution.

Key stats

  • Value for money: 5/5

    Rating

  • Free

    Starting price

  • 11

    Sources

  • Analyzed

  • Value for money: 5/5. Free open-source core, no license cost
  • Ease of use: 2/5. Steep setup; needs Linux and SIP skills
  • Feature depth: 4/5. Full-featured, domain-based multi-tenant PBX
  • Support quality: 2/5. Community forums unless you pay membership
  • Security posture: 2/5. Repeated CVEs including public RCE exploits
  • Free Starting price Open source, self-hosted
  • Yes Free tier Paid membership optional
  • FreeSWITCH GUI Platform Domain-based multi-tenant
  • Multiple Public CVEs Including public RCE exploits

Pricing

Open source (self-hosted)

Free

  • Full multi-tenant PBX GUI
  • Community support
  • You host, update, and secure it

FusionPBX Membership

Not listed in reviewed sources

  • Member updates and support
  • Certified builds

Security

Self-hosted software with a track record of CVEs since 2019, including RCE; hardening is the operator's responsibility.

  • Remote code execution in 4.5.29Public exploit published for FusionPBX 4.5.29 RCE.⁷
  • CVE-2024-23387Affects FusionPBX prior to 5.1.0.⁸
  • CVE-2020-21055 directory traversalPublicly disclosed directory traversal vulnerability.
  • Operator Panel command executionPublic Metasploit module targets command execution.

What users say

VoIP admins on Reddit favor FusionPBX for on-prem and multi-tenant work but lean heavily on community forums, tutorials, and forks to fill documentation gaps.

“FusionPBX is my favorite”
Reddit, r/VOIP (On Premise PBX recommendations)

Companies that use it

  • SureVoIP
Full analysis

Based on ~20 public sources: Reddit/forum threads, official docs and site, GitHub, and NVD/Exploit-DB.

Powerful free multi-tenant PBX for Linux-skilled teams; a setup and security burden for everyone else.

Methodology

Based on ~20 public sources: Reddit/forum threads, official docs and site, GitHub, and NVD/Exploit-DB.

Read how a report is made.

Sources

  1. FusionPBX official sitefusionpbx.com
    official
  2. FusionPBX on GitHubgithub.com
    official
  3. FusionPBX Membersfusionpbx.com
    official
  4. Opinions on FusionPBX — r/VOIPreddit.com
    review
  5. On Premise PBX recommendations — r/VOIPreddit.com
    review
  6. Migrating from FreePBX to FusionPBX — r/VOIPreddit.com
    review
  7. FusionPBX 4.5.29 RCE — Exploit-DBexploit-db.com
    security
  8. CVE-2024-23387cve.org
    security
  9. Introducing FusionPBX — Nerd Vittlesnerdvittles.com
    news
  10. FusionPBX Tutorial — WhichVoIPwhichvoip.com
    review
  11. FusionPBX Docs — Securitydocs.fusionpbx.com
    official

Add this review to your site

This check for FusionPBX says Depends.

Put the badge on your site.

Visitors see the independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Depends FusionPBX Independent review on Should I Use It

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.