What’s Vulnerable › Products

FreePBX endpoint vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your FreePBX endpoint version is affected

Latest FreePBX endpoint vulnerabilities

• CVE-2025-67513 — FreePBX Endpoint Manager's Weak Default Password Allows Unauthenticated Access in Endpoint Module REST API (CVSS 6.9)
• CVE-2025-61675 — FreePBX Endpoint Manager vulnerable to authenticated SQL injection in multiple configuration parameters (CVSS 8.6)
• CVE-2025-59051 — FreePBX Endpoint Manager command injection via Network Scanning feature (CVSS 8.6)