FreePBX endpoint vulnerabilities
4 published CVEs name FreePBX endpoint among the affected products; CISA lists 1 of them as exploited in the wild.
- Published CVEs
- 4
- Last 12 months
- 1
- Critical
- 1
- Known exploited
- 1
Critical 1High 2Medium 1Low 0Not scored 0
Known exploitedNewest addition to KEV first
- CVE-2025-57819
FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE
FreePBX · endpoint
ExploitedCritical10.0
Newest CVEs
- CVE-2025-67513
FreePBX Endpoint Manager's Weak Default Password Allows Unauthenticated Access in Endpoint Module REST API
FreePBX · endpoint
Medium6.9 - CVE-2025-61675
FreePBX Endpoint Manager vulnerable to authenticated SQL injection in multiple configuration parameters
FreePBX · endpoint
High8.6 - CVE-2025-59051
FreePBX Endpoint Manager command injection via Network Scanning feature
FreePBX · endpoint
High8.6 - CVE-2025-57819
FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE
FreePBX · endpoint
ExploitedCritical10.0