[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fmSxPBxVsQrEMDmtbUf3__jNsGXSF3pmith4zo9h_CTk":3,"g5a-risk:CVE-2019-19006":138},{"success":4,"data":5,"meta":136},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":38,"epssPercentile":26,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":47,"references":48,"referencesCount":66,"weaknesses":67,"weaknessesCount":47,"isActivelyExploited":4,"cisaInfo":76,"otxData":26,"relatedBlogPosts":77,"seoMetadata":78,"configurations":103,"relatedVendorCves":121,"notableEvents":122},"CVE-2019-19006","What is CVE-2019-19006?","Sangoma FreePBX 115.0.16.26 and below, 14.0.13.11 and below, 13.0.197.13 and below have Incorrect Access Control.","2019-11-21T18:15:11.993","2020-08-24T17:37:01.14",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[15],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":24,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[30],{"Source":16,"Type":17,"CVSSData":31,"BaseSeverity":24,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":20,"AccessComplexity":21,"Authentication":22,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.55946,[38,38,38,38,38,38,38],"Critical",[42],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"sangoma","freepbx","*","cpe:2.3:a:sangoma:freepbx:*:*:*:*:*:*:*:*",1,[49,54,59,62],{"url":50,"source":51,"tags":52},"https:\u002F\u002Fcommunity.freepbx.org\u002Ft\u002Ffreepbx-security-vulnerability-sec-2019-001\u002F62772","Freepbx",[53],"Vendor Advisory",{"url":55,"source":56,"tags":57},"https:\u002F\u002Fpastebin.com\u002F2CdsQMKW","Pastebin",[58],"Broken Link",{"url":60,"source":51,"tags":61},"https:\u002F\u002Fwiki.freepbx.org\u002Fdisplay\u002FFOP\u002F2019-11-20+Remote+Admin+Authentication+Bypass",[53],{"url":63,"source":51,"tags":64},"https:\u002F\u002Fwww.freepbx.org\u002Fcategory\u002Fblog\u002F",[65],"Product",4,[68],{"id":69,"name":70,"description":71,"extendedDescription":72,"status":73,"abstraction":74,"structure":75},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",{"shortDescription":72,"requiredAction":72,"vulnerabilityName":72,"dateAdded":26},[],{"title":79,"metaDescription":80,"keywords":81,"canonicalUrl":82,"structuredData":83},"What is CVE-2019-19006? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-19006, a critical severity cyber security vulnerability from 2019. High exploit probability (55.9%). Sangoma FreePBX 115.0...","CVE-2019-19006, CVE-2019-19006 vulnerability, CVE-2019-19006 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, sangoma security, freepbx vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2019-19006",{"@context":84,"@type":85,"headline":79,"description":80,"datePublished":9,"dateModified":10,"author":86,"publisher":90,"about":94,"mainEntityOfPage":98,"articleSection":101,"keywords":102},"https:\u002F\u002Fschema.org","TechArticle",{"@type":87,"name":88,"url":89},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":87,"name":88,"url":89,"logo":91},{"@type":92,"url":93},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":95,"name":6,"description":96,"additionalType":97},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":99,"@id":100},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-19006","Cybersecurity","CVE-2019-19006, CVE-2019-19006 vulnerability, CVE-2019-19006 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[104],{"Operator":26,"Negate":26,"Nodes":105},[106],{"Operator":107,"Negate":26,"CPEMatch":108},"OR",[109,113,117],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":110,"VersionStartExcluding":26,"VersionStartIncluding":111,"VersionEndExcluding":26,"VersionEndIncluding":112},"15601D4B-F4D7-4A59-AA59-F9C28DCF6E33","13.0.0.0","13.0.197.13",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":114,"VersionStartExcluding":26,"VersionStartIncluding":115,"VersionEndExcluding":26,"VersionEndIncluding":116},"BC783D51-829F-4F40-8C11-8006CFD56701","14.0.0.0","14.0.13.11",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":118,"VersionStartExcluding":26,"VersionStartIncluding":119,"VersionEndExcluding":26,"VersionEndIncluding":120},"55D2FF3D-ED67-46E2-98D5-E01B14100E9E","15.0.0.0","15.0.16.26",[],[123,130],{"id":124,"eventType":125,"eventTime":126,"details":127,"label":128,"color":129},"c9646c45-ec75-46f4-bf61-c76dfeedc309","NEW_CISA","2026-04-01T11:42:51.633741+00:00","CVE added to CISA Known Exploited Vulnerabilities","Added to CISA KEV","red",{"id":131,"eventType":132,"eventTime":133,"details":134,"label":135,"color":129},"6b7b6578-da79-4a2b-b404-92afe1bba87d","HIGH_EPSS_DELTA","2026-04-01T14:22:38.305165+00:00","Daily EPSS score increased by 0.195 on 2023-12-30","EPSS Score Increased",{"lastModified":10,"cacheTime":137,"version":32},1792444327319,{"score":139,"band":40,"action":140,"scoredAt":141},89,"Emergency patch","2026-10-19T07:51:45.077944+00:00"]