Skip to content
OpenAdvisories

Vendor

FreePBX

44 known vulnerabilities.

Products

security-reporting 15 framework 5 endpoint 4 api 3 endpointman 2 tts 2 missedcall 1 music 1 ucp 1 FreePBX 1 contactmanager 1 restapps 1 cdr 1 core 1 arimanager 1 backup 1 voicemail 1 FreePBX Framework 1 filestore 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.6
    CVE-2025-64328 Exploited Public exploit EPSS 85%

    FreePBX Administration GUI is Vulnerable to Authenticated Command Injection

    FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. In versions 17.0.2.36 and above before 17.0.3, the filestore module within the Administrative interface is vulnerable to a post-authentication command injection by an au…

    FreePBX filestore
    KEV Feb 3, 2026
  • Critical 10.0
    CVE-2025-57819 Exploited Public exploit EPSS 95%

    FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE

    FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable due to insufficiently sanitized user-supplied data allowing unauthenticated access to FreePBX Administrator leading to arbitrary database manipulatio…

    FreePBX endpoint
    KEV Aug 29, 2025