Freepbx

FreePBX Unauthenticated SQL Injection to RCE (CVE-2025-57819) new KEV EPSS 88%CVE-2025-57819webCRITICAL 9.8Patched2026-07-06FreePBX Framework Module Authentication Bypass via Forged Authorization Header (CVE-2025-66039) newCVE-2025-66039networkCRITICAL 9.8Patched2026-07-06FreePBX Unauthenticated UCP Access via Hard-Coded Credentials (CVE-2026-46376) newCVE-2026-46376webCRITICAL 9.1Patched2026-07-05