EN
Product
endpoint
On CISA KEVExploited in the wild
4
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 1Low 0
Watch
Add endpoint to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-57819 In wildKEV | 9.8 | Aug 28 | FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE Affected: < 15.0.66; < 16.0.89; < 17.0.3 |
| CVE-2025-61675 | 8.6 | Oct 14 | FreePBX Endpoint Manager vulnerable to authenticated SQL injection in multiple configuration parameters Affected: < 16.0.92; >= 17.0.0, < 17.0.6 |
| CVE-2025-59051 | 8.6 | Oct 14 | FreePBX Endpoint Manager command injection via Network Scanning feature Affected: < 16.0.92; >= 17.0.0, < 17.0.6 |
| CVE-2025-67513 | 6.9 | Dec 10 | FreePBX Endpoint Manager's Weak Default Password Allows Unauthenticated Access in Endpoint Module REST API Affected: < 16.0.96; >= 17.0.1, < 17.0.10 |
Showing 4