Critical severity9.8CISA KEVNVD Advisory· Published Aug 28, 2025· Updated Jun 17, 2026

CVE-2025-57819

Description

FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable due to insufficiently sanitized user-supplied data allowing unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution. This issue has been patched in endpoint versions 15.0.66, 16.0.89, and 17.0.3.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Freepbx/Freepbx2 versions
cpe:2.3:a:sangoma:freepbx:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:sangoma:freepbx:*:*:*:*:*:*:*:*range: >=15.0,<15.0.66
- (no CPE)range: 15, 16, and 17 before 15.0.66, 16.0.89, and 17.0.3
Freepbx/Endpointmancpe-rescue
Range: < 15.0.66

Patches

Vulnerability mechanics

References

community.freepbx.org/t/security-advisory-please-lock-down-your-administrator-access/107203nvdIssue TrackingVendor Advisory
github.com/FreePBX/security-reporting/security/advisories/GHSA-m42g-xg4c-5f3hnvdMitigationVendor Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

News mentions

Hackers Use Six-Layer Persistence to Maintain Access on Compromised FreePBX Systems
Cyber Security News · May 22, 2026

Severity

CriticalCVSS v3.1

9.8/ 10

CVSS v410.0

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected

Source repo: github.com/watchtowrlabs/watchTowr-vs-FreePBX-CVE-2025-57819

EPSS

Probability of exploitation in the next 30 days.

88.27%

VYPR risk score

Composite of severity, exploitation, and reach.

0.79high

cvss	0.637
epss	0.071
exploit	0.030
kev	0.120
patch	-0.070
ransomware	0.000

Weaknesses

CWE-288
Authentication Bypass Using an Alternate Path or Channel
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE ID

CVE-2025-57819