CVE-2019-19006 Sangoma FreePBX
Sangoma FreePBX contains an improper authentication vulnerability that potentially allows unauthorized users to bypass password authentication and access services provided by the FreePBX admin.
- CVSS
- not scored
On CISA’s exploited list
Sangoma FreePBX Improper Authentication Vulnerability
- Added
- 2026-02-03
- Federal patch deadline
- 2026-02-24
- Ransomware use
- not known