Exploit for SQL Injection in Sangoma Freepbx

No d...

CVE-2026-46516

Frogman provides headless FreePBX control. Prior to version 1.6.6, Frogman's chat-console markdown formatter assets/js/chat.js's formatMarkdown inserted regex capture groups as raw HTML in four template patterns: inline code, bold, markdown links, and download links. Tool responses that reflect...

CVE-2026-46516

CVE-2026-46516 affects Frogman (headless FreePBX control). Before v1.6.6, the chat-console markdown formatter in assets/js/chat.js (formatMarkdown) inserted regex capture groups as raw HTML in four template patterns (inline code, bold, markdown links, download links). Tool responses containing us...

CVE-2026-46516 Frogman vulnerable to stored XSS in chat console formatter (escalation vector in multi-admin deployments)

Frogman provides headless FreePBX control. Prior to version 1.6.6, Frogman's chat-console markdown formatter assets/js/chat.js's formatMarkdown inserted regex capture groups as raw HTML in four template patterns: inline code, bold, markdown links, and download links. Tool responses that reflect...

EUVD-2026-45963

Frogman provides headless FreePBX control. Prior to version 1.6.6, Frogman's chat-console markdown formatter assets/js/chat.js's formatMarkdown inserted regex capture groups as raw HTML in four template patterns: inline code, bold, markdown links, and download links. Tool responses that reflect...

Exploit for SQL Injection in Sangoma Freepbx

CVE-2025-57819 — FreePBX SQL Injection → RCE PoC CVE-2025-5...

security-research

security-research Personal CVE PoC repository — exploit scrip...

PT-2026-57517

🚨 CVE-2023-43336 Sangoma Technologies FreePBX before cdr 15.0.18, 16.0.40, 15.0.16, and 16.0.17 was discovered to contain an access control issue via a modified parameter value, e.g., changing extension=self to extension=101. 🎖@cveNotify...

Exploit for SQL Injection in Sangoma Freepbx

CVE-2025-57819 - FreePBX Unauthenticated Remote Code Execution...

Exploit for SQL Injection in Sangoma Freepbx

CVE-2025-57819 Exploit Metadata - Severity: Critical...

Exploit for SQL Injection in Sangoma Freepbx

CVE-2025-57819 Exploit Metadata - Severity: Critical...

Exploit for SQL Injection in Sangoma Freepbx

FreePBX 16 — Unauthenticated SQLi to RCE Proof-of-concept exp...

Exploit for SQL Injection in Sangoma Freepbx

CVE-2025-57819 — FreePBX SQLi → RCE → Root Full-chain PoC for...

📄 FreePBX SQL Injection / Shell Upload / Remote Root

This Python3 script exploits a remote SQL injection vulnerability in FreePBX and adds a remote shell that achieves root privileges. This issue has been patched in endpoint versions 15.0.66, 16.0.89, and 17.0.3...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Sangoma Freepbx

FreePBX CVE-2025-57819 — Unauthenticated SQLi to Root RCE...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Sangoma Freepbx

CVE-2025-57819 — FreePBX Pre-Auth SQLi to RCE An all-in-one e...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Sangoma Freepbx

FreePBX 16 — Unauthenticated SQLi to RCE Proof-of-concept exp...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Sangoma Freepbx

CVE-2025-57819 — FreePBX Unauthenticated SQLi → RCE One-shot...

CVE-2026-46376

FreePBX is an open source IP PBX. From 15.0.42 to before 16.0.45 and 17.0.7, unauthenticated users may be able to access the User Control Panel UCP using hard-coded initial template credentials if these were not immediately changed by the Administrator who enabled UCP. Authenticated access to ACP...

CVE-2026-40520

FreePBX api module version 17.0.8 and prior contain a command injection vulnerability in the initiateGqlAPIProcess function where GraphQL mutation input fields are passed directly to shellexec without sanitization or escaping. An authenticated user with a valid bearer token can send a GraphQL...