H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Vulnerability

CVE-2025-57819

Sangoma FreePBX contains an authentication bypass vulnerability due to insufficiently sanitized user-supplied data allows unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution.

Vulnerability
TypeVulnerability
External ID—
First seen2025-08-29
Last seen2025-08-29

Confidence

—

Sangoma FreePBX contains an authentication bypass vulnerability due to insufficiently sanitized user-supplied data allows unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution.

Labels

exploitedkev

CISA KEV context

Vendor / productSangoma FreePBX
Added2025-08-29
Due date2025-09-19
9 recorded

Relationships

mitigates
from Remediate CVE-2025-57819
Mitigation
related-to
to Blind SQL Injection
Technique
related-to
to Command Line Execution through SQL Injection
Technique
related-to
to Directory Indexing
Technique
related-to
to Expanding Control over the Operating System from the Database
Technique
related-to
to Exploitation of Thunderbolt Protection Flaws
Technique
related-to
to Object Relational Mapping Injection
Technique
related-to
to SQL Injection
Technique
related-to
to SQL Injection through SOAP Parameter Tampering
Technique
3 external

References

nvd
CVE-2025-57819
open
cwe
CWE-89
open
cwe
CWE-288
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance