Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-59056

FreePBX is an open-source web-based graphical user interface. In FreePBX 15, 16, and 17, malicious connections to the Administrator Control Panel web interface can cause the uninstall function to be triggered for certain modules. This function drops the module's database tables, which is where most modules store their configuration. This vulnerability is fixed in 15.0.38, 16.0.41, and 17.0.21.

Published

2025-09-15T21:15:36.470

Last Modified

2025-10-17T14:36:35.073

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-22
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application sangoma freepbx < 15.0.38 Yes
Application sangoma freepbx < 16.0.41 Yes
Application sangoma freepbx < 17.0.21 Yes
References