CVE-2025-57819 Sangoma FreePBX
Sangoma FreePBX contains an authentication bypass vulnerability due to insufficiently sanitized user-supplied data allows unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution.
- CVSS
- not scored
On CISA’s exploited list
Sangoma FreePBX Authentication Bypass Vulnerability
- Added
- 2025-08-29
- Federal patch deadline
- 2025-09-19
- Ransomware use
- not known