[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2xLx1x_YaL7C8Tv2PqGJXAH8pCH6uKx-_jZpUhGq7PE":3,"g5a-risk:CVE-2025-57819":159},{"success":4,"data":5,"meta":156},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":32,"epssPercentile":27,"epssTimeSeries":33,"severity":35,"affectedProducts":36,"affectedProductsCount":42,"references":43,"referencesCount":65,"weaknesses":66,"weaknessesCount":80,"isActivelyExploited":4,"cisaInfo":81,"otxData":27,"relatedBlogPosts":82,"seoMetadata":83,"configurations":108,"relatedVendorCves":127,"notableEvents":128},"CVE-2025-57819","What is CVE-2025-57819?","FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable due to insufficiently sanitized user-supplied data allowing unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution. This issue has been patched in endpoint versions 15.0.66, 16.0.89, and 17.0.3.","FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable due to insufficiently sanitized user-supplied d...","2025-08-28T17:15:36.79","2025-10-24T13:58:40.963",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":31,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[],[],0.95024,[34,34,34,34,34,34,32],0.86347,"Critical",[37],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"sangoma","freepbx","*","cpe:2.3:a:sangoma:freepbx:*:*:*:*:*:*:*:*",1,[44,50,55,60],{"url":45,"source":46,"tags":47},"https:\u002F\u002Fcommunity.freepbx.org\u002Ft\u002Fsecurity-advisory-please-lock-down-your-administrator-access\u002F107203","Freepbx",[48,49],"Issue Tracking","Vendor Advisory",{"url":51,"source":52,"tags":53},"https:\u002F\u002Fgithub.com\u002FFreePBX\u002Fsecurity-reporting\u002Fsecurity\u002Fadvisories\u002FGHSA-m42g-xg4c-5f3h","GitHub",[54,49],"Mitigation",{"url":56,"source":52,"tags":57},"https:\u002F\u002Fgithub.com\u002Fwatchtowrlabs\u002FwatchTowr-vs-FreePBX-CVE-2025-57819",[58,59],"Exploit","Third Party Advisory",{"url":61,"source":62,"tags":63},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2025-57819","CISA",[64],"US Government Resource",4,[67,75],{"id":68,"name":69,"description":70,"extendedDescription":71,"status":72,"abstraction":73,"structure":74},"CWE-288","Authentication Bypass Using an Alternate Path or Channel","A product requires authentication, but the product has an alternate path or channel that does not require authentication.","","Incomplete","Base","Simple",{"id":76,"name":77,"description":78,"extendedDescription":71,"status":79,"abstraction":73,"structure":74},"CWE-89","Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.","Stable",2,{"shortDescription":71,"requiredAction":71,"vulnerabilityName":71,"dateAdded":27},[],{"title":84,"metaDescription":85,"keywords":86,"canonicalUrl":87,"structuredData":88},"What is CVE-2025-57819? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2025-57819, a critical severity cyber security vulnerability from 2025. High exploit probability (95.0%). FreePBX is an open-so...","CVE-2025-57819, CVE-2025-57819 vulnerability, CVE-2025-57819 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, sangoma security, freepbx vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2025-57819",{"@context":89,"@type":90,"headline":84,"description":85,"datePublished":10,"dateModified":11,"author":91,"publisher":95,"about":99,"mainEntityOfPage":103,"articleSection":106,"keywords":107},"https:\u002F\u002Fschema.org","TechArticle",{"@type":92,"name":93,"url":94},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":92,"name":93,"url":94,"logo":96},{"@type":97,"url":98},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":100,"name":6,"description":101,"additionalType":102},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":104,"@id":105},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2025-57819","Cybersecurity","CVE-2025-57819, CVE-2025-57819 vulnerability, CVE-2025-57819 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[109],{"Operator":27,"Negate":27,"Nodes":110},[111],{"Operator":112,"Negate":113,"CPEMatch":114},"OR",false,[115,119,123],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":116,"VersionStartExcluding":27,"VersionStartIncluding":117,"VersionEndExcluding":118,"VersionEndIncluding":27},"F9143871-4B1B-4E24-BEC2-BFD90A93D22E","15.0","15.0.66",{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":120,"VersionStartExcluding":27,"VersionStartIncluding":121,"VersionEndExcluding":122,"VersionEndIncluding":27},"CA0527BD-AE80-4126-A72A-008EEC486381","16.0","16.0.89",{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":124,"VersionStartExcluding":27,"VersionStartIncluding":125,"VersionEndExcluding":126,"VersionEndIncluding":27},"89857E91-C727-4043-8BCE-A2A089D6F720","17.0","17.0.3",[],[129,136,143,149],{"id":130,"eventType":131,"eventTime":132,"details":133,"label":134,"color":135},"489930af-2059-486f-a104-55910af65d7d","NEW_NVD","2025-08-29T04:01:06.36594+00:00","New CVE added to NVD","Published to NVD","blue",{"id":137,"eventType":138,"eventTime":139,"details":140,"label":141,"color":142},"b6027470-b373-443b-a2f0-599a50420424","NEW_CISA","2025-08-30T04:01:04.103303+00:00","CVE added to CISA Known Exploited Vulnerabilities","Added to CISA KEV","red",{"id":144,"eventType":145,"eventTime":146,"details":147,"label":148,"color":142},"81be1efc-3ba6-40fa-a0e4-4aea94aa5b10","HIGH_EPSS_DELTA","2025-08-31T04:04:27.93464+00:00","Daily EPSS score increased by 0.400 on 2025-08-30","EPSS Score Increased",{"id":150,"eventType":151,"eventTime":152,"details":153,"label":154,"color":155},"c06eb84f-2733-4b8f-a58f-9fd0b29a3d56","LOW_EPSS_DELTA","2025-09-17T04:07:49.395957+00:00","Daily EPSS score decreased by 0.209 on 2025-08-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":157,"version":158},1792444444380,"2.0",{"score":160,"band":35,"action":161,"scoredAt":162},90,"Emergency patch","2026-10-16T07:08:37.152351+00:00"]