CVE-2025-61675: high-severity vulnerability in FreePBX endpoint
FreePBX Endpoint Manager vulnerable to authenticated SQL injection in multiple configuration parameters
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
48Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendcvss 8.6epss 40%
from disclosure to weapon58 days
Published on NVDOct 14
metasploit+58d
FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. In versions prior to 16.0.92 for FreePBX 16 and versions prior to 17.0.6 for FreePBX 17, the Endpoint Manager module contains authenticated SQL injection vulnerabilities affecting multiple parameters in the basestation, model, firmware, and custom extension configuration functionality areas. Authentication with a known username is required to exploit these vulnerabilities. Successful exploitation allows authenticated users to execute arbitrary SQL queries against the database, potentially enabling access to sensitive data or modification of database contents. This issue has been patched in version 16.0.92 for FreePBX 16 and version 17.0.6 for FreePBX 17.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
Affected products
FreePBX · endpointRelated CVEs — FreePBX endpoint
In the same product, most dangerous first.
CVE-2025-57819CRITICALFreePBX Affected by Authentication Bypass Leading to SQL Injection and RCEEPSS 95.2%KEVCVE-2025-59051HIGHFreePBX Endpoint Manager command injection via Network Scanning featureEPSS 0.5%CVE-2025-67513MEDIUMFreePBX Endpoint Manager's Weak Default Password Allows Unauthenticated Access in Endpoint Module REST APIEPSS 0.3%