EN
Product
endpoint
by FreePBX · last CVE Dec 10, 2025
On CISA KEVExploited in the wild
4
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 1Low 0
Watch

Add endpoint to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-61675
8.6
39%
Oct 14
FreePBX Endpoint Manager vulnerable to authenticated SQL injection in multiple configuration parameters
Affected: < 16.0.92; >= 17.0.0, < 17.0.6
CVE-2025-59051
8.6
1%
Oct 14
FreePBX Endpoint Manager command injection via Network Scanning feature
Affected: < 16.0.92; >= 17.0.0, < 17.0.6
Showing 2