High severity8.8NVD Advisory· Published Mar 31, 2025· Updated Jun 17, 2026
CVE-2025-30004
CVE-2025-30004
Description
Xorcom CompletePBX is vulnerable to command injection in the administrator Task Scheduler functionality, allowing for attackers to execute arbitrary commands as the root user.
This issue affects CompletePBX: all versions up to and prior to 5.2.35
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3<5.2.35+ 2 more
- (no CPE)range: <5.2.35
- (no CPE)range: 0
- cpe:2.3:a:xorcom:completepbx:*:*:*:*:*:*:*:*range: <5.2.36.1
Patches
Vulnerability mechanics
References
2- vulncheck.com/advisories/completepbx-authenticated-command-injectionnvdThird Party Advisory
- www.xorcom.com/new-completepbx-release-5-2-36-1/nvdRelease Notes
News mentions
0No linked articles in our index yet.