shouldiuse.io

VERDICT

Should I use FusionPBX?

Open-source multi-tenant PBX GUI for FreeSWITCH - fusionpbx.com

Depends. A strong free choice if you are an ITSP or IT team with Linux, FreeSWITCH, and SIP skills who wants a self-hosted multi-tenant phone system. Skip it if you want plug-and-play phones or vendor-managed security — a hosted VoIP service is the better buy.

Confidence

Medium. Based on ~20 public sources: Reddit/forum threads, official docs and site, GitHub, and NVD/Exploit-DB.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support quality
  • Security posture

Pricing

Free

Open source (self-hosted)

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
FusionPBX MembershipNot listed in reviewed sources

Best for

  • ITSPs and resellers running hosted multi-tenant PBX
  • IT teams with Linux and SIP experience
  • Budget-driven self-hosters replacing legacy phone systems
  • Hobbyists — it even runs on a Raspberry Pi

Not for

  • Small offices wanting plug-and-play phones
  • Non-technical buyers with no Linux admin
  • Teams needing vendor SLAs and managed updates
  • Anyone unwilling to own PBX security hardening

Gotchas - check before you buy

high

Self-hosted: firewalling, fail2ban, and TLS hardening are entirely your job

high

Older versions have public RCE exploits; run current release and restrict web access

medium

Billing is not built in; expect third-party add-ons like ASTPP

medium

Support quality hinges on paid membership; confirm what your tier includes first

Pros and cons

Pros

  • Free, open-source, full-featured multi-tenant PBX
  • No per-seat license cost, per community reports
  • Light enough to run on a Raspberry Pi
  • Favorite pick in on-prem PBX community threads

Cons

  • History of serious CVEs, including public RCE exploits
  • Setup is involved enough to need lengthy community 'taming' guides
  • Newcomers depend on scattered community resources and forums
  • Community actively recommends newer forks like FS PBX

Sources & method

Analyzed 9/25/2026 - 11 sources - Self-hosted software with a track record of CVEs since 2019, including RCE; hardening is the operator's responsibility.

official x4review x4security x2news x1
  • Remote code execution in 4.5.29, Public exploit published for FusionPBX 4.5.29 RCE.
  • CVE-2024-23387, Affects FusionPBX prior to 5.1.0.
  • CVE-2020-21055 directory traversal, Publicly disclosed directory traversal vulnerability.
  • Operator Panel command execution, Public Metasploit module targets command execution.

Key stats

  • Value for money: 5/5

    Rating

  • Free

    Starting price

  • 11

    Sources

  • Analyzed

  • Value for money: 5/5. Free open-source core, no license cost
  • Ease of use: 2/5. Steep setup; needs Linux and SIP skills
  • Feature depth: 4/5. Full-featured, domain-based multi-tenant PBX
  • Support quality: 2/5. Community forums unless you pay membership
  • Security posture: 2/5. Repeated CVEs including public RCE exploits
  • Free Starting price Open source, self-hosted
  • Yes Free tier Paid membership optional
  • FreeSWITCH GUI Platform Domain-based multi-tenant
  • Multiple Public CVEs Including public RCE exploits

Pricing

Open source (self-hosted)

Free

  • Full multi-tenant PBX GUI
  • Community support
  • You host, update, and secure it

FusionPBX Membership

Not listed in reviewed sources

  • Member updates and support
  • Certified builds

Security

Self-hosted software with a track record of CVEs since 2019, including RCE; hardening is the operator's responsibility.

  • Remote code execution in 4.5.29Public exploit published for FusionPBX 4.5.29 RCE.⁷
  • CVE-2024-23387Affects FusionPBX prior to 5.1.0.⁸
  • CVE-2020-21055 directory traversalPublicly disclosed directory traversal vulnerability.
  • Operator Panel command executionPublic Metasploit module targets command execution.

What users say

VoIP admins on Reddit favor FusionPBX for on-prem and multi-tenant work but lean heavily on community forums, tutorials, and forks to fill documentation gaps.

“FusionPBX is my favorite”
Reddit, r/VOIP (On Premise PBX recommendations)

Companies that use it

  • SureVoIP
Full analysis

Based on ~20 public sources: Reddit/forum threads, official docs and site, GitHub, and NVD/Exploit-DB.

Powerful free multi-tenant PBX for Linux-skilled teams; a setup and security burden for everyone else.

Methodology

Based on ~20 public sources: Reddit/forum threads, official docs and site, GitHub, and NVD/Exploit-DB.

Sources

  1. FusionPBX official sitefusionpbx.com
    official
  2. FusionPBX on GitHubgithub.com
    official
  3. FusionPBX Membersfusionpbx.com
    official
  4. Opinions on FusionPBX — r/VOIPreddit.com
    review
  5. On Premise PBX recommendations — r/VOIPreddit.com
    review
  6. Migrating from FreePBX to FusionPBX — r/VOIPreddit.com
    review
  7. FusionPBX 4.5.29 RCE — Exploit-DBexploit-db.com
    security
  8. CVE-2024-23387cve.org
    security
  9. Introducing FusionPBX — Nerd Vittlesnerdvittles.com
    news
  10. FusionPBX Tutorial — WhichVoIPwhichvoip.com
    review
  11. FusionPBX Docs — Securitydocs.fusionpbx.com
    official

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.