ByteOS Network

NVD Vulnerability Details :

CVE-2025-57819

Awaiting Analysis

Known KEV

More Info Official Page

Source-security-advisories@github.com

View Known Exploited Vulnerability (KEV) details

Published At-28 Aug, 2025 | 17:15

Updated At-30 Aug, 2025 | 01:00

FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable due to insufficiently sanitized user-supplied data allowing unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution. This issue has been patched in endpoint versions 15.0.66, 16.0.89, and 17.0.3.

CISA Catalog

Date Added	Due Date	Vulnerability Name	Required Action
2025-08-29	2025-09-19	Sangoma FreePBX Authentication Bypass Vulnerability	Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	4.0	10.0	CRITICAL	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE ID	Type	Source
CWE-89	Primary	security-advisories@github.com
CWE-288	Primary	security-advisories@github.com

References

Hyperlink	Source	Resource
https://community.freepbx.org/t/security-advisory-please-lock-down-your-administrator-access/107203	security-advisories@github.com	N/A
https://github.com/FreePBX/security-reporting/security/advisories/GHSA-m42g-xg4c-5f3h	security-advisories@github.com	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History