Skip to content
Threat Feed
Subscribe

Product

FreePBX (15.x < 15.0.66, 16.x < 16.0.89, 17.x < 17.0.3)

1 brief RSS
critical advisory

FreePBX Endpoint Manager Unauthenticated Remote Code Execution

An unauthenticated SQL injection vulnerability (CVE-2025-57819) in the FreePBX Endpoint Manager module allows attackers to achieve remote code execution by injecting malicious cron jobs.

FreePBX webapps cve rce sql-injection exploit
1r 3t 1c