DEV Community

Cover image for CVE-2025-57819: Sangoma FreePBX Authentication Bypass Vulnerability
Freedom Coder
Freedom Coder

Posted on • Originally published at scyscan.com

CVE-2025-57819: Sangoma FreePBX Authentication Bypass Vulnerability

CVE ID

CVE-2025-57819

Vulnerability Name

Sangoma FreePBX Authentication Bypass Vulnerability

  • Project: Sangoma
  • Product: FreePBX

Date

  • Date Added: 2025-08-29
  • Due Date: 2025-09-19

Description

Sangoma FreePBX contains an authentication bypass vulnerability due to insufficiently sanitized user-supplied data allows unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution.

Known To Be Used in Ransomware Campaigns?

Unknown

Action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Additional Notes

https://github.com/FreePBX/security-reporting/security/advisories/GHSA-m42g-xg4c-5f3h ; https://nvd.nist.gov/vuln/detail/CVE-2025-57819

More CVEs Info

Common Vulnerabilities & Exposures (CVE) List

Top comments (0)