Multiple security vulnerabilities have been disclosed in the open-source private branch exchange (PBX) platform FreePBX, including a critical flaw that could result in an authentication bypass under certain configurations. The shortcomings, discovered by Horizon3.ai and reported to the project maintainers on September 15, 2025, are listed below - CVE-2025-61675 (CVSS score: 8.6) - Numerous
source https://thehackernews.com/2025/12/freepbx-authentication-bypass-exposed.html
Monday, December 15, 2025
FreePBX Patches Critical SQLi, File-Upload, and AUTHTYPE Bypass Flaws Enabling RCE
.png){kind=avatar}
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment
please do not enter any spam link in the comment box