FreePBX Vulnerabilities Enable Authentication Bypass Leading to Remote Code Execution

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

FreePBX Vulnerabilities Enable Remote Code Execution via Authentication Bypass FreePBX has addressed critical vulnerabilities in its Endpoint Manager module that allow for authentication bypass and remote code execution. Discovered by Horizon3.ai researchers, these vulnerabilities affect telephony endpoint configurations in the open-source IP PBX system and include three high-severity issues distinct from CVE-2025-57819. CVE-2025-66039 is one of the identified vulnerabilities that enables this exploit. 2 sources 63