Aug 29, 2025
1 new incident, 0 with updates.
Started
- ClosedPatched
Sangoma FreePBX: FreePBX Authentication Bypass Vulnerability
Sangoma FreePBX contains an authentication bypass vulnerability due to insufficiently sanitized user-supplied data allows unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution. Added to CISA KEV on 2025-08-29.
Sangoma FreePBXClosed Aug 29, 2025