CVE-2025-57819

Description

Sangoma FreePBX contains an authentication bypass vulnerability due to insufficiently sanitized user-supplied data allows unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution.

References

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• https://nvd.nist.gov/vuln/detail/CVE-2025-57819
• https://github.com/FreePBX/security-reporting/security/advisories/GHSA-m42g-xg4c-5f3h
• https://github.com/TeteREN/CVE-2025-57819-RCE
• https://raw.githubusercontent.com/TeteREN/CVE-2025-57819-RCE/main/CVE-2025-57819_PoC.py
• https://raw.githubusercontent.com/TeteREN/CVE-2025-57819-RCE/main/README.md
• https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-26123
• https://community.freepbx.org/t/security-advisory-please-lock-down-your-administrator-access/107203