Every CVESearch/Get API key

CVE-2025-57819

FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE

10.0 CriticalIn KEVPublic exploit

CVE-2025-57819 is a critical vulnerability (CVSS 10.0) in Elastic Endpoint, published August 28, 2025. CISA lists it as known to be exploited, since August 29, 2025. EUVD reports exploitation since August 29, 2025. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 95.2%, the 99th percentile. No source names a fixed version.

What does this mean?
Severity
10.0 CriticalCVSS 4.0, CVE List
Exploit chance
95.2%EPSS, 99th percentile
Exploitation
ExploitedCISA KEV,
Fixed in
No fix listedNo source names one

Description

FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable due to insufficiently sanitized user-supplied data allowing unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution. This issue has been patched in endpoint versions 15.0.66, 16.0.89, and 17.0.3.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

95.2%Up 94.8 points since Aug 29, 2025
90%50%10%1%

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
MetasploitFreePBX ajax.php unauthenticated SQLi to RCE2025-08-28
PoC in GitHubrxerium/CVE-2025-578192025-08-28
PoC in GitHubSucuri-Labs/CVE-2025-57819-ioc-check2025-08-29
PoC in GitHubcybertechajju/cve-2025-578192025-08-30
PoC in GitHubblueisbeautiful/CVE-2025-578192025-09-01
PoC in GitHubImBIOS/lab-cve-2025-578192025-09-04
PoC in GitHubwatchtowrlabs/watchTowr-vs-FreePBX-CVE-2025-578192025-09-08
PoC in GitHubMuhammadWaseem29/SQL-Injection-and-RCE_CVE-2025-578192025-09-12
PoC in GitHubxV4nd3Rx/CVE-2025-57819_FreePBX-PoC2025-09-14
PoC in GitHuborange0Mint/CVE-2025-57819_FreePBX2025-09-18
Show 18 moreShow less
Public exploits
SourceLinkDate
PoC in GitHub0xEhab/FreePBX-CVE-2025-57819-RCE2026-06-06
PoC in GitHubb4sh2/CVE-2025-57819-poc2026-06-06
PoC in GitHubJeanback1/CVE-2025-57819-exploit2026-06-07
PoC in GitHubjf-gondim/freepbx-endpoint-sqli-rce2026-06-07
PoC in GitHubYuvrajSHAD/FreePBX-CVE-2025-578192026-06-08
PoC in GitHub0xyngtg/FreePBX-CVE-2025-57819-CVE-2025-616782026-06-12
PoC in GitHubozcanpng/CVE-2025-57819-FreePBX-RCE2Root2026-06-18
PoC in GitHubHexBytee/FreePBX-SQLi-RCE2026-06-24
PoC in GitHubIts1Zero/cve-2025-57819-exploit2026-07-01
PoC in GitHubNeobee714/CVE-2025-57819-POC2026-07-20
PoC in GitHubTeteREN/CVE-2025-57819-RCE2026-08-01
Exploit-DBFreePBX 17.0.2 - Remote Code Execution (RCE)2026-09-03
PoC in GitHubr3vpwnx/CVE-2025-578192026-09-06
PoC in GitHubshivammittal2403/cve-2025-57819-freepbx-range2026-09-17
PoC in GitHubdonggle0802/cve-2025-578192026-09-23
PoC in GitHubkelltich-756/FreePBX-Breaker2026-10-05
PoC in GitHubfoxcornlab/freepbx-rce-detector2026-10-08
NucleiFreePBX - Remote Code Execution

What each source reports

CVE List Score used10.0

FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE

FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable due to insufficiently sanitized user-supplied data allowing unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution. This issue has been patched in endpoint versions 15.0.66, 16.0.89, and 17.0.3.

Record
CVE-2025-57819
CVSS 4.0
10.0 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Weakness
CWE-89, CWE-288
Updated
2026-11-02
EUVDEUVD-2025-2612310.0

FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable due to insufficiently sanitized user-supplied data allowing unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution. This issue has been patched in endpoint versions 15.0.66, 16.0.89, and 17.0.3.

Record
EUVD-2025-26123
CVSS 4.0
10.0 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Updated
2026-11-02
CISA KEVNo score

Sangoma FreePBX Authentication Bypass Vulnerability

Sangoma FreePBX contains an authentication bypass vulnerability due to insufficiently sanitized user-supplied data allows unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution.

Record
CVE-2025-57819
Weakness
CWE-89, CWE-288
Updated
2026-11-02
NVD10.0

FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable due to insufficiently sanitized user-supplied data allowing unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution. This issue has been patched in endpoint versions 15.0.66, 16.0.89, and 17.0.3.

Record
CVE-2025-57819
CVSS 4.0
10.0 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-89, CWE-288
Updated
2026-11-02
OSV10.0

FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE

FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable due to insufficiently sanitized user-supplied data allowing unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution. This issue has been patched in endpoint versions 15.0.66, 16.0.89, and 17.0.3.

Record
CVE-2025-57819
CVSS 4.0
10.0 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Weakness
CWE-288, CWE-89
Updated
2026-11-02

History

History
RecordedChangedSources
exploitsPoC in GitHub
exploitation
exploits, exploits_more
exploits
first indexedCVE List, EUVD, Exploit-DB, CISA KEV, Metasploit, Nuclei, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

This page doesn't list everything

The full exploit list has 1 more link.

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open