WARNING: ~900 Sangoma FreePBX systems remain compromised via CVE-2025-64328, a ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Approximately 900 Sangoma FreePBX Systems Compromised via CVE-2025-64328 Approximately 900 Sangoma FreePBX systems are compromised due to CVE-2025-64328, a command injection vulnerability. This bug was patched in version 17.0.3, but many systems remain unpatched and vulnerable to exploitation. The vulnerability was added to the CISA KEV list on February 3, 2026, indicating active exploitation. 1 sources 41