Login Request a demo
FR
Product
FreePBX
by Sangoma · last CVE Sep 28, 2026
On CISA KEVExploited in the wild
51
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities51In the news2Timeline
Severity mix
Critical 7High 25Medium 11Low 0
Severity
All severities51Critical7High25Medium11Low0
Exploitation
On CISA KEV3Exploited in the wild3
Watch

Add FreePBX to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-57819
In wildKEV
9.8
95%
Aug 28
FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE
Affected: 15.0 before 15.0.66; 16.0 before 16.0.89; 17.0 before 17.0.3
CVE-2019-19006
In wildKEV
9.8
56%
Nov 21
Sangoma FreePBX Improper Authentication Vulnerability
Affected: 13.0.0.0 through 13.0.197.13; 14.0.0.0 through 14.0.13.11; 15.0.0.0 through 15.0.16.26
CVE-2025-64328
In wildKEV
7.2
85%
Nov 7
FreePBX Administration GUI is Vulnerable to Authenticated Command Injection
Affected: All versions, or not specified
Showing 3