Firetruck

CVE-2025-57819

KEV
Updated Feb 26, 2026 · PUBLISHED
View KEV entry →

Description

Sangoma FreePBX contains an authentication bypass vulnerability due to insufficiently sanitized user-supplied data allows unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
endpointFreePBX / endpoint< 15.0.66affected
endpointFreePBX / endpoint< 16.0.89affected
endpointFreePBX / endpoint< 17.0.3affected