SWSandworm Watch
target entity

FreePBX

2 source-linked records in the current knowledge graph.

high

CVE-2019-19006: Sangoma FreePBX Improper Authentication Vulnerability

Sangoma FreePBX contains an improper authentication vulnerability that potentially allows unauthorized users to bypass password authentication and access services provided by the FreePBX admin. Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CVE-2019-19006EPSS 36.6%FreePBXSangoma
CISA KEV ↗ · unattributed attribution
high

CVE-2025-57819: Sangoma FreePBX Authentication Bypass Vulnerability

Sangoma FreePBX contains an authentication bypass vulnerability due to insufficiently sanitized user-supplied data allows unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution. Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CVE-2025-57819EPSS 93.3%FreePBXSangoma
CISA KEV ↗ · unattributed attribution