High severity · published Nov 7, 2025
CVE-2025-64328
FreePBX Administration GUI is Vulnerable to Authenticated Command Injection
In wildKEV
7.2
CVSS
84.6%
EPSS
Yes
On KEV
Description
FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. In versions 17.0.2.36 and above before 17.0.3, the filestore module within the Administrative interface is vulnerable to a post-authentication command injection by an authenticated known user via the testconnection -> check_ssh_connect() function. An attacker can leverage this vulnerability to obtain remote access to the system as an asterisk user. This issue is fixed in version 17.0.3.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)84.6% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed Feb 3, 2026
Federal remediation dueFeb 24, 2026
Ransomware campaign useNot known
Affected products
Which versions
FI
filestore · FreePBX
>= 17.0.2.36, < 17.0.3 · source: vendor, NVD
FR
FreePBX · Sangoma
All versions, or not specified · source: KEV
In the news
VulnerabilityHigh
[CISA KEV] CVE-2025-64328: Sangoma FreePBX - Sangoma FreePBX OS Command Injection Vulnerability
Sangoma FreePBX Endpoint Manager contains an OS command injection vulnerability that could allow for a post-authentication command injection by an authenticated known user via the testconnection -> check_ssh_connect() function. An attacker can leverage this vulnerability to potentially obtain remote access to the system as an asterisk user.
FRFreePBX CVE-2025-64328
Feb 3, 2026·CISA KEV
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-64328
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-64328
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
x_refsource_CONFIRM
https://github.com/FreePBX/security-reporting/security/advisories/GHSA-vm9p-46mv-5xvw
x_refsource_MISC
https://github.com/FreePBX/filestore/blob/f0e3983059271efd80b483ec823310ef19a59013/drivers/SSH/testconnection.php#L2
x_refsource_MISC
https://www.freepbx.org/watch-what-we-do-with-security-fixes-%f0%9f%91%80