---
id: "CVE-2025-57819"
kind: "vulnerability"
aliases: ["CVE-2025-57819"]
title: "sangoma freepbx: FreePBX is an open-source web-based graphical user interface"
severity: "critical"
cvss: 10.0
epss: null
exploited: true
status: "open"
category: "vendor"
products: [{"name": "sangoma freepbx", "fixed": ["15.0.66"], "affected": ">= 15.0, < 15.0.66", "ecosystem": "vendor"}, {"name": "sangoma freepbx", "fixed": ["16.0.89"], "affected": ">= 16.0, < 16.0.89", "ecosystem": "vendor"}, {"name": "sangoma freepbx", "fixed": ["17.0.3"], "affected": ">= 17.0, < 17.0.3", "ecosystem": "vendor"}, {"name": "Sangoma FreePBX", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "freepbx", "sangoma", "self-hosted", "vendor", "voip"]
not_affected_if: ["managed-hosting"]
published_at: "2025-08-28T17:15:36+00:00"
first_seen_at: "2026-10-23T19:11:51+00:00"
updated_at: "2026-10-24T00:09:50+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-57819", "first_seen_at": "2026-10-23T19:11:51+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-57819", "first_seen_at": "2026-10-23T22:29:05+00:00"}]
---

# sangoma freepbx: FreePBX is an open-source web-based graphical user interface

Sangoma FreePBX has an authentication bypass caused by insufficiently sanitized user input. An unauthenticated attacker can reach the FreePBX administrator interface, manipulate the database, and execute code remotely.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:sangoma freepbx affected >= 15.0, < 15.0.66 fixed 15.0.66
- vendor:sangoma freepbx affected >= 16.0, < 16.0.89 fixed 16.0.89
- vendor:sangoma freepbx affected >= 17.0, < 17.0.3 fixed 17.0.3
- vendor:Sangoma FreePBX affected ? fixed ?

## Fix

Apply the mitigation from the Sangoma vendor advisory; CISA says to discontinue use of the product if no mitigation is available. Exact fixed version: unknown

## Timeline

- 2026-10-23T19:11:51+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-57819
- 2026-10-23T22:29:05+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2025-57819

## From the sources

Sangoma FreePBX contains an authentication bypass vulnerability due to insufficiently sanitized user-supplied data allows unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution.

CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_