TI-2025-35702 CVE-2025-57819
FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE
Priority CRITICAL 100KEV
FreePBX is an open-source web-based graphical user interface.
Sangoma
Records98All Threatist records
Exploited (KEV)4In CISA KEV
CVSS critical21CVSS 9.0–10.0
CVSS high41CVSS 7.0–8.9
Exploited now
Sangoma records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsRecords
98 records
TI-2019-13698 CVE-2019-19006 · GHSA-85h5-chmw-697j
Sangoma FreePBX 115.0.16.26 and below, 14.0.13.11 and below, 13.0.197.13 and below have Incorrect Access Control.
Priority CRITICAL 100KEV
Sangoma FreePBX 115.0.16.26 and below, 14.0.13.11 and below, 13.0.197.13 and below have Incorrect Access Control.
TI-2026-08422 CVE-2026-9586 · GHSA-m32j-v93f-gfgc
Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMB
Priority CRITICAL 99KEV
An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997).
TI-2025-39763 CVE-2025-64328
FreePBX Administration GUI is Vulnerable to Authenticated Command Injection
Priority CRITICAL 96KEV
FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems.
TI-2025-30244 CVE-2025-47779
Using malformed From header can forge identity with ";" or NULL in name portion
Priority HIGH 73
Asterisk is an open-source private branch exchange (PBX).
TI-2024-38391 CVE-2024-58294 · GHSA-3f55-6gfh-8xfx
FreePBX 16 Authenticated Remote Code Execution via API Module
Priority HIGH 73
FreePBX 16 contains an authenticated remote code execution vulnerability in the API module that allows attackers with valid session credentials to execute arbitrary commands.
TI-2023-23197 CVE-2023-43336 · GHSA-3g8h-47mp-4839
Sangoma Technologies FreePBX before cdr 15.0.18, 16.0.40, 15.0.16, and 16.0.17 was…
Priority HIGH 73
Sangoma Technologies FreePBX before cdr 15.0.18, 16.0.40, 15.0.16, and 16.0.17 was discovered to contain an access control issue via a modified parameter value, e.g., changing extension=self to extension=101.
TI-2023-27195 CVE-2023-49786
Asterisk susceptible to Denial of Service via DTLS Hello packets during call initiation
Priority HIGH 72
Asterisk is an open source private branch exchange and telephony toolkit.
TI-2014-06023 CVE-2014-7235 · GHSA-7pc8-wp58-mr3p
htdocs_ari/includes/login.php in the ARI Framework module/Asterisk Recording Interface…
Priority HIGH 72
htdocs_ari/includes/login.php in the ARI Framework module/Asterisk Recording Interface (ARI) in FreePBX before 2.9.0.9, 2.10.x, and 2.11 before 2.11.1.5 allows remote attackers to execute arbitrary code via the ari_auth…
TI-2025-36981 CVE-2025-59429
FreePBX core module vulnerable to reflected cross-site scripting via Asterisk HTTP Status page
Priority HIGH 70
FreePBX is an open source GUI for managing Asterisk.
TI-2012-04113 CVE-2012-4869 · GHSA-vmpf-f73j-fg6v
The callme_startcall function in recordings/misc/callme_page.php in FreePBX 2.9, 2.10…
Priority HIGH 70
The callme_startcall function in recordings/misc/callme_page.php in FreePBX 2.9, 2.10, and earlier allows remote attackers to execute arbitrary commands via the callmenum parameter in a c action.
TI-2025-00959 CVE-2025-1131
Asterisk Unsafe Shell Sourcing in safe_asterisk Leads to Local Privilege Escalation
Priority HIGH 66
A local privilege escalation vulnerability exists in the safe_asterisk script included with the Asterisk toolkit package.
TI-2014-01484 CVE-2014-1903 · GHSA-xvg7-pm76-82w3
admin/libraries/view.functions.php in FreePBX 2.9 before 2.9.0.14, 2.10 before 2.10.1.15…
Priority HIGH 65
admin/libraries/view.functions.php in FreePBX 2.9 before 2.9.0.14, 2.10 before 2.10.1.15, 2.11 before 2.11.0.23, and 12 before 12.0.1alpha22 does not restrict the set of functions accessible to the API handler, which all…
TI-2025-34699 CVE-2025-54995
Asterisk remotely exploitable leak of RTP UDP ports and internal resources
Priority MEDIUM 62
Asterisk is an open source private branch exchange and telephony toolkit.
TI-2025-31747 CVE-2025-49832
Asterisk is Vulnerable to Remote DoS and possible RCE Attacks During Memory Allocation
Priority MEDIUM 62
Asterisk is an open source private branch exchange and telephony toolkit.
TI-2023-26930 CVE-2023-49294
Asterisk Path Traversal vulnerability
Priority MEDIUM 62
Asterisk is an open source private branch exchange and telephony toolkit.
TI-2021-20548 CVE-2021-45461 · GHSA-pph6-2c9x-fm9c
FreePBX, when restapps (aka Rest Phone Apps) 15.0.19.87, 15.0.19.88, 16.0.18.40, or…
Priority MEDIUM 61
FreePBX, when restapps (aka Rest Phone Apps) 15.0.19.87, 15.0.19.88, 16.0.18.40, or 16.0.18.41 is installed, allows remote attackers to execute arbitrary code, as exploited in the wild in December 2021.
TI-2024-35843 CVE-2024-53566 · GHSA-2fr9-xph3-mm3j
An issue in the action_listcategories() function of Sangoma Asterisk…
Priority MEDIUM 58
An issue in the action_listcategories() function of Sangoma Asterisk v22/22.0.0/22.0.0-rc1/22.0.0-rc2/22.0.0-pre1 allows attackers to execute a path traversal.
TI-2025-30245 CVE-2025-47780
cli_permissions.conf: deny option does not work for disallowing shell commands
Priority MEDIUM 55
Asterisk is an open-source private branch exchange (PBX).
TI-2025-40565 CVE-2025-66039
FreePBX Endpoint Manager Allows Unauthenticated Logins to Administrator Control Panel via Forged Basic Auth Header
Priority MEDIUM 54
FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems.
Priority MEDIUM 52
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE.
TI-2026-22594 CVE-2026-28287
FreePBX: Authenticated Remote Code Execution via Recordings Module AJAX Endpoints
Priority MEDIUM 51
FreePBX is an open source IP PBX.
TI-2025-23206 CVE-2025-32105 · GHSA-pggq-8qg7-4m9m
A buffer overflow in the the Sangoma IMG2020 HTTP server through 2.3.9.6 allows an…
Priority MEDIUM 51
A buffer overflow in the the Sangoma IMG2020 HTTP server through 2.3.9.6 allows an unauthenticated user to achieve remote code execution.
TI-2024-37922 CVE-2024-57520 · GHSA-4m27-833c-75q4
Insecure Permissions vulnerability in asterisk v22 allows a remote attacker to execute…
Priority MEDIUM 51
Insecure Permissions vulnerability in asterisk v22 allows a remote attacker to execute arbitrary code via the action_createconfig function.
TI-2022-07661 CVE-2022-23608
Use after free in PJSIP
Priority MEDIUM 50
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE.