Product by FreePBX

    Endpoint

    4 known vulnerabilities in Endpoint (FreePBX), 1 of them actively exploited (CISA KEV).

    Key figures

    4

    Vulnerabilities

    1

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Endpoint (FreePBX)
    CriticalCVE-2025-57819

    FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE

    In CISA KEValso in 1 other product

    		9.8
    HighCVE-2025-61675

    FreePBX Endpoint: SQL Injection

    		—
    HighCVE-2025-59051

    FreePBX Endpoint Manager command injection via Network Scanning feature

    		—
    MediumCVE-2025-67513

    FreePBX Endpoint: Weak Password Requirements

    		—

    All products by FreePBX