9.8CRITICALCISA KEV — actively exploited

CVE-2025-57819 — FreePBX is an open-source web-based graphical user interface.

Sangoma · Freepbx · Published 28 Aug 2025 · Modified 26 Sept 2026

Description

FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable due to insufficiently sanitized user-supplied data allowing unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution. This issue has been patched in endpoint versions 15.0.66, 16.0.89, and 17.0.3.

References

https://community.freepbx.org/t/security-advisory-please-lock-down-your-administrator-access/107203
https://github.com/FreePBX/security-reporting/security/advisories/GHSA-m42g-xg4c-5f3h
https://github.com/watchtowrlabs/watchTowr-vs-FreePBX-CVE-2025-57819
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-57819

What to do

Check whether Freepbx is in your asset inventory.
Exploitation confirmed — patch within 72 hours.
Record the decision in your risk register for audit evidence.

Alert me on similar CVEs →

Link: adminadda.com/cve/CVE-2025-57819