Known Exploited Vulnerabilities August 29, 2025 · CISA KEV Catalog

CVE-2025-57819: Sangoma FreePBX Authentication Bypass Vulnerability

Sangoma FreePBX contains an authentication bypass vulnerability due to insufficiently sanitized user-supplied data allows unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2025-57819 Sangoma
Related: CVE-2026-9586: Sangoma Switchvox SQL Injection Vulnerability Known Exploited Vulnerabilities · Sep 02, 2026
CVE-2019-19006: Sangoma FreePBX Improper Authentication Vulnerability Known Exploited Vulnerabilities · Feb 03, 2026
CVE-2025-64328: Sangoma FreePBX OS Command Injection Vulnerability Known Exploited Vulnerabilities · Feb 03, 2026