Pierre Jourdan

About Pierre Jourdan

AppSec & Interop Manager, 3CX

Pierre has been working in IT for the last 15 years. As a Security Pentester he takes great pride in assuring security of the company and training employees on the threats they may face.

IP Phone Firmware Updates

Firmware updates for Yealink & Fanvil. The latest IP Phone firmware updates for Yealink & Fanvil have been released and are fully tested with V20. These updates come with several bug fixes. Please see the release notes for Yealink and Fanvil. Firmware Updates for V20 Yealink T41U (108.87.0.26) T42U (108.87.0.26) T43U (108.87.0.26) T44U (108.87.0.26) T44W (108.87.0.26) T [...]

Security Update: HTTP/2 BOMB Vulnerability Mitigation

HTTP/2 Bomb — CVE-2026-49975 · Full Disclosure · June 8, 2026 A recently disclosed denial-of-service vulnerability, known as HTTP/2 Bomb (CVE-2026-49975), affects multiple web server implementations. CVE-2026-49975, also known as HTTP/2 Bomb, is a remote denial-of-service exploit against most major web servers, including nginx, Apache httpd, Microsoft IIS, Envoy, and Cloudflare [...]

Security Alert: Update your Self-Hosted 3CX Deployment

Action required due to a web server configuration vulnerability. 3CX has released a security hotfix relating to a third party component. If your 3CX deployment is reachable from the public internet, apply the latest update immediately. 3CX hosted instances have already received the update. Who is Affected Deployment type Publicly accessible from the internet? Action required Ho [...]

Security Alert for Systems with IP Based SIP Trunks

Hackers are becoming smarter at thwarting IP based security. Upgrade to Update 8A immediately. IP based SIP Trunk users are increasingly at risk of hacker attacks. Recently we have seen a surge in techniques and methods which can circumvent systems with loosely configured security. If you haven’t locked down your IP based SIP trunk for today’s environment your system is at risk [...]

New Firmware Release for Fanvil X Series

Firmware update fixing key security issues in Fanvil firmware. A new interop firmware update (v2.12.25.6) for the Fanvil X series IP phones was provided by Fanvil. According to Fanvil, this firmware includes important security fixes and stability improvements. Following successful interop verification, the update has been made available. For further details, please contact Fanv [...]

Don’t be THAT Guy: Prevention Guides Refreshed

Security is not optional and when it comes to VoIP systems, prevention is everything. Some of our most popular blogs on call fraud, scam calls and PBX security have now been fully updated to reflect the latest 3CX V20. These guides have helped many businesses to understand: How call fraud happens How to prevent toll fraud How to block spam and scam calls How to configure their [...]

IP Phone Firmware Updates

Firmware updates for Yealink & Snom. The latest IP Phone firmware updates for Yealink & Snom have been released, and are fully tested with V20. These updates come with a number of bug fixes. Please see the release notes for Yealink and Snom. Firmware Updates for V20 Yealink T4xU series: 108.87.0.22 T5x series: 96.87.0.22 T7x, T8x series: 185.87.0.37 T58W: 150.87.0.20 CP [...]

By |February 17th, 2026|24 Comments

New Firmware Release for Fanvil X210-V2

Firmware update fixing key security issues in Fanvil firmware. A new interop firmware update (v2.12.22.2) for the Fanvil X210-V2 IP phone was provided by Fanvil. According to Fanvil, this firmware includes important security fixes. Following successful interop verification, the update has been made available. For further details, please contact Fanvil Support or visit the Fanvi [...]

By |December 19th, 2025|3 Comments

Update 7 Hotfix

Syslog Logging & ASP.NET /Kestrel CVE-2025-55315. We’ve released a Hotfix Build 20.0.7.1060 for Update 7 that addresses a syslog logging issue and includes the latest Microsoft ASP.NET Core runtime patches. Syslog Logging Bug Fix - Resolves an issue where sip-related messages about SIP Registrations were being reported to syslog. ASP.NET / Kestrel Security Update (CVE-2025- [...]

By |October 21st, 2025|30 Comments

Yealink Firmware Updates for Legacy Models

New firmware ensures compatibility with 3CX V20 Update 7. Yealink has finally released new firmware for several legacy and end-of-life (EOL) phone models. These updates address a security issue recently reported by the U.S. Cybersecurity and Infrastructure Security Agency (CISA), registered under ICSA-25-219-08. 3CX has verified interoperability of these firmware versions with [...]

By |October 16th, 2025|6 Comments