Actively exploited in the wild
Sangoma FreePBX Authentication Bypass Vulnerability
Sangoma — FreePBX · Listed in the CISA KEV since 2025-08-29. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CVE-2025-57819
CriticalCVSS 9.8KEVExploitation Probability (EPSS)
Very high risk100th percentile — higher than 100% of all known CVEs
Summary
FreePBX, an open-source graphical user interface, has vulnerabilities in versions 15, 16, and 17 due to insufficiently sanitized user-supplied data. This allows unauthenticated access to the FreePBX Administrator, leading to arbitrary database manipulation and remote code execution.
Risk Assessment
Organizations may face serious threats, including unauthorized access to the system and the potential for remote execution of malicious code, which could lead to data loss or system compromise.
Recommendation
It is recommended to upgrade to versions 15.0.66, 16.0.89, or 17.0.3 to mitigate this vulnerability and ensure proper system security.
Original NVD description (English source)
FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable due to insufficiently sanitized user-supplied data allowing unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution. This issue has been patched in endpoint versions 15.0.66, 16.0.89, and 17.0.3.