High severity · published Dec 3, 2025
CVE-2025-62173
Authenticated SQL Injection in Endpoint Module Rest API
8.6
CVSS
0.3%
EPSS
No
On KEV
Description
## Summary
Authenticated SQL Injection Vulnerability in Endpoint Module Rest API
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 18% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RE
restapps · FreePBX
< 16.0.41; >= 17.0.0, < 17.0.6 · source: vendor