EXPLOIT/ALERT Back to feed

Sangoma FreePBX Authentication Bypass Vulnerability

Sangoma FreePBX contains an authentication bypass vulnerability due to insufficiently sanitized user-supplied data allows unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution.

Published 2 Sep 2026Updated 2 Sep 2026609 sources
CVSS 10.0 ✓ VERIFIED REFERENCE△ CISA KEV
Overview Sources History

What happened

Sangoma FreePBX contains an authentication bypass vulnerability due to insufficiently sanitized user-supplied data allows unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution.

Affected versions

FreePBX: See original advisory Fixed: See vendor advisory.

Why it matters

This source correlation may provide earlier visibility while structured CVE metadata is still being updated.

Detection & mitigation

  • Review the original advisory and validate affected versions.
  • Apply vendor-provided updates or mitigations when available.

Public PoC references

RepositoryAuthorFirst seenReference
Exploit-DB 52681FreePBX 17.0.2 - Remote Code Execution (RCE)Jared Brits2026-09-03VerifiedCXSecurity WLB-2026090002FreePBX 17.0.2 Remote Code Execution (RCE)K3ysTr0K3R2026-09-06CandidateSploitusProof-of-concept exploit for CVE-2025-57819. CVSS 10.Sploitus index2026-09-06T20:32:40+00:00CandidatePoC-in-GitHub · rxerium/CVE-2025-57819Detection for CVE-2025-57819★ 1rxerium2025-08-28CandidatePoC-in-GitHub · Sucuri-Labs/CVE-2025-57819-ioc-checkThis is repository contains a script to check for current IOCs listed in the freepbx forum topic of the CVE-2025-57819★ 0Sucuri-Labs2025-08-29CandidatePoC-in-GitHub · cybertechajju/cve-2025-57819Detects vulnerable FreePBX versions affected by CVE-2025-57819.★ 6cybertechajju2025-08-30CandidatePoC-in-GitHub · blueisbeautiful/CVE-2025-57819FreePBX SQL Injection Exploit★ 7blueisbeautiful2025-09-01CandidatePoC-in-GitHub · ImBIOS/lab-cve-2025-57819FreePBX CVE-2025-57819 lab (Docker) + Nuclei POC for unauth SQLi (time-based).★ 1ImBIOS2025-09-04CandidatePoC-in-GitHub · watchtowrlabs/watchTowr-vs-FreePBX-CVE-2025-57819★ 29watchtowrlabs2025-09-08CandidatePoC-in-GitHub · MuhammadWaseem29/SQL-Injection-and-RCE_CVE-2025-57819FreePBX versions 15, 16, and 17 contain a Remote Code Execution (RCE) vulnerability caused by insufficient sanitization of user-supplied data in endpoints.★ 7MuhammadWaseem292025-09-12CandidatePoC-in-GitHub · xV4nd3Rx/CVE-2025-57819_FreePBX-PoCSafe, read-only SQL Injection checker for FreePBX (CVE-2025-57819), using error/boolean/time-based techniques with per-parameter verdicts and JSON reporting.★ 1xV4nd3Rx2025-09-14CandidatePoC-in-GitHub · orange0Mint/CVE-2025-57819_FreePBXThis repository includes two PoC scripts for CVE-2025-57819 in FreePBX: one to create a new admin user (poc_admin.py), and another to extract credentials using sqlmap (poc_auto_get_username_pass.py). For educational and authorized use only.★ 2orange0Mint2025-09-18CandidatePoC-in-GitHub · b4sh2/CVE-2025-57819-pocCVE-2025-57819 -> rce★ 7b4sh22026-06-06CandidatePoC-in-GitHub · 0xEhab/FreePBX-CVE-2025-57819-RCE★ 150xEhab2026-06-06CandidatePoC-in-GitHub · Jeanback1/CVE-2025-57819-exploitFreePBX Pre-Auth SQLi to RCE (CVE-2025-57819) — All-in-One Exploit★ 2Jeanback12026-06-07CandidatePoC-in-GitHub · jf-gondim/freepbx-endpoint-sqli-rceUnauthenticated SQL injection in FreePBX Endpoint Manager (CVE-2025-57819) that injects a cron-scheduled PHP webshell for remote code execution.★ 0jf-gondim2026-06-07CandidatePoC-in-GitHub · YuvrajSHAD/FreePBX-CVE-2025-57819Unauthenticated SQL Injection to Remote Code Execution in FreePBX — CVE-2025-57819★ 1YuvrajSHAD2026-06-08CandidatePoC-in-GitHub · 0xyngtg/FreePBX-CVE-2025-57819-CVE-2025-61678Chains CVE-2025-57819 (stacked query SQL injection) and CVE-2025-61678 (authenticated file upload in FreePBX Endpoint Manager) to achieve Remote Code Execution (RCE). For educational use only.★ 00xyngtg2026-06-12CandidatePoC-in-GitHub · ozcanpng/CVE-2025-57819-FreePBX-RCE2RootFull-chain CVE-2025-57819 PoC for FreePBX 15, 16, and 17: unauthenticated SQLi to RCE and root takeover.★ 2ozcanpng2026-06-18CandidatePoC-in-GitHub · JazzTheRabbit/FreePBX-SQLi-RCECVE-2025-57819 FreePBX SQLi RCE PoC★ 0JazzTheRabbit2026-06-24CandidatePoC-in-GitHub · Its1Zero/cve-2025-57819-exploit★ 0Its1Zero2026-07-01CandidatePoC-in-GitHub · K3ysTr0K3R/CVE-2025-57819CVE-2025-57819 - FreePBX Unauthenticated Remote Code Execution (RCE)★ 3K3ysTr0K3R2026-07-02CandidatePoC-in-GitHub · Neobee714/CVE-2025-57819-POCFreePBX 未认证SQL注入导致远程代码执行，FreePBX 15 (低于 15.0.66)、16 (低于 16.0.89)、17 (低于 17.0.3)。该漏洞位于商业化“endpoint”模块中，因对用户输入过滤不严，允许未认证的攻击者绕过管理员权限，执行SQL注入，并最终实现远程代码执行★ 0Neobee7142026-07-20CandidatePoC-in-GitHub · TeteREN/CVE-2025-57819-RCECVE-2025-57819-RCE_PoC★ 0TeteREN2026-08-01CandidatePoC-in-GitHub · r3vpwnx/CVE-2025-57819CVE-2025-57819 - FreePBX 16 Endpoint Manager unauthenticated SQL injection to RCE (PoC)★ 0r3vpwnx2026-09-06Candidate
CorrectionsReport an issue