CVE-2025-57819

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

December 16, 2025

Last Seen

May 22, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

INJ3CTOR3 Targets FreePBX Systems with JOMANGY Webshell and VoIP Toll Fraud71.0

A cyber campaign attributed to the threat actor INJ3CTOR3 is targeting FreePBX systems, deploying a new PHP webshell named JOMANGY. This operation utilizes a six-layer persistence mechanism to maintain control over compromised systems, allowing attackers to exploit victims' SIP trunks for fraudulent...

FreePBX Vulnerabilities Enable Remote Code Execution via Authentication Bypass62.8

FreePBX has addressed critical vulnerabilities in its Endpoint Manager module that allow for authentication bypass and remote code execution. Discovered by Horizon3.ai researchers, these vulnerabilities affect telephony endpoint configurations in the open-source IP PBX system and include three high-...