VYPR
← All advisories
High severity7.5NVD Advisory· Published Sep 15, 2025· Updated Jun 17, 2026

CVE-2025-59056

CVE-2025-59056

Description

FreePBX is an open-source web-based graphical user interface. In FreePBX 15, 16, and 17, malicious connections to the Administrator Control Panel web interface can cause the uninstall function to be triggered for certain modules. This function drops the module's database tables, which is where most modules store their configuration. This vulnerability is fixed in 15.0.38, 16.0.41, and 17.0.21.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Freepbx/Freepbx2 versions
    cpe:2.3:a:sangoma:freepbx:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:sangoma:freepbx:*:*:*:*:*:*:*:*range: >=15.0,<15.0.38
    • (no CPE)range: 15.0.38, 16.0.41, 17.0.21
  • Freepbx/Frameworkv5
    Range: < 15.0.38

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.