RaqibCTI
CVE

CVE-2025-57819

P2
Sangoma FreePBX Authentication Bypass Vulnerability
Sangoma · FreePBX
Date added (CISA)
2025-08-29
Remediation due
2025-09-19
Known ransomware use
Not indicated
Remediation priority
P2past CISA due date

Description

Sangoma FreePBX contains an authentication bypass vulnerability due to insufficiently sanitized user-supplied data allows unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution.

Source: NVD ↗ · CISA KEV Catalog ↗