CVE-2025-57819: Sangoma FreePBX Authentication Bypass Vulnerability.
Sangoma FreePBX Authentication Bypass Vulnerability. Sangoma FreePBX contains an authentication bypass vulnerability due to insufficiently sanitized user-supplied data allows unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution.
- CISA KEV-listed (remediation due 2025-09-19)
- EPSS 77.0% (99.0% percentile)