Skip to content
OpenAdvisories

Product · FreePBX

endpointman

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2025-61678 Public exploit EPSS 46%

    FreePBX Endpoint Manager vulnerable to authenticated arbitrary file upload via fwbrand parameter

    FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. In versions prior to 16.0.92 for FreePBX 16 and versions prior to 17.0.6 for FreePBX 17, the Endpoint Manager module contains an authenticated arbitrary file upload vuln…

    FreePBX endpointman