RaqibCTI
CVE

CVE-2019-19006

P2
Sangoma FreePBX Improper Authentication Vulnerability
Sangoma · FreePBX
Date added (CISA)
2026-02-03
Remediation due
2026-02-24
Known ransomware use
Not indicated
Remediation priority
P2past CISA due date

Description

Sangoma FreePBX contains an improper authentication vulnerability that potentially allows unauthorized users to bypass password authentication and access services provided by the FreePBX admin.

Source: NVD ↗ · CISA KEV Catalog ↗