Voip

FreePBX Unauthenticated SQL Injection to RCE (CVE-2025-57819) new KEV EPSS 88%CVE-2025-57819webCRITICAL 9.8Patched2026-07-06FreePBX Framework Module Authentication Bypass via Forged Authorization Header (CVE-2025-66039) newCVE-2025-66039networkCRITICAL 9.8Patched2026-07-06PJSIP / PJNATH ICE Session Stack Buffer Overflow via SDP ice-ufrag (CVE-2026-25994) newCVE-2026-25994networkHIGHPatched2026-07-05FreePBX Unauthenticated UCP Access via Hard-Coded Credentials (CVE-2026-46376) newCVE-2026-46376webCRITICAL 9.1Patched2026-07-05