FreePBX Vulnerabilities Enable Remote Code Execution via Authentication Bypass

FreePBX has addressed critical vulnerabilities in its Endpoint Manager module that allow for authentication bypass and remote code execution. Discovered by Horizon3.ai researchers, these vulnerabilities affect telephony endpoint configurations in the open-source IP PBX system and include three high-severity issues distinct from CVE-2025-57819. CVE-2025-66039 is one of the identified vulnerabilities that enables this exploit.