Improper authentication in Sangoma Freepbx
CVSS Skor
9.8
EPSS İhtimal
%3.3
Risk Skoru
0.3
Yayın
10 ay önce
Public Exploits · GitHub ve Metasploit Intelligence
Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.
This vulnerability allows both authenticated and unauthenticated remote attackers to execute remote code on vulnerable FreePBX instances. These issues have been fixed in FreePBX versions 16.0.42, 16.0.92, 17.0.6, and 17.0.22. It's important to note that this authentication bypass vulnerability is not present in the default FreePBX configuration.
This repository documents three security vulnerabilities discovered in FreePBX (CVE-2025-66039, CVE-2025-61678, CVE-2025-61675), including analysis, impact, and proof-of-concept details for security research and awareness purposes.
İlgili Benzer Açıklar
SQL injection in Sangoma Freepbx
Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMB
SQL injection in Sangoma Freepbx
Out-of-bounds write in Sangoma Asterisk
Authenticated FreePBX Music RCE via mpg123 and Asterisk Call Files
Improper access control in Sangoma Freepbx
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-66039"