Skip to content
OpenAdvisories

Product · FreePBX

endpoint

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.6
    CVE-2025-61675 Public exploit EPSS 40%

    FreePBX Endpoint Manager vulnerable to authenticated SQL injection in multiple configuration parameters

    FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. In versions prior to 16.0.92 for FreePBX 16 and versions prior to 17.0.6 for FreePBX 17, the Endpoint Manager module contains authenticated SQL injection vulnerabilities…

    FreePBX endpoint
  • High 8.6
    CVE-2025-59051

    FreePBX Endpoint Manager command injection via Network Scanning feature

    The FreePBX Endpoint Manager module includes a Network Scanning feature that provides web-based access to nmap functionality for network device discovery. In Endpoint Manager 16 before 16.0.92 and 17 before 17.0.6, insufficiently sanitized user-supplied input…

    FreePBX endpoint