Skip to content
OpenAdvisories

Product · FreePBX

endpoint

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.6
    CVE-2025-61675 Public exploit EPSS 40%

    FreePBX Endpoint Manager vulnerable to authenticated SQL injection in multiple configuration parameters

    FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. In versions prior to 16.0.92 for FreePBX 16 and versions prior to 17.0.6 for FreePBX 17, the Endpoint Manager module contains authenticated SQL injection vulnerabilities…

    FreePBX endpoint
  • Critical 10.0
    CVE-2025-57819 Exploited Public exploit Scanner template EPSS 95%

    FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE

    FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable due to insufficiently sanitized user-supplied data allowing unauthenticated access to FreePBX Administrator leading to arbitrary database manipulatio…

    FreePBX endpoint
    KEV Aug 29, 2025