CVE-2019-19006
Sangoma FreePBX Improper Authentication Vulnerability
CVSS
—
Sem CVSS
EPSS
54.7%
p99
KEV
SIM
3 de fev. de 2026
Exploit Today
80
0-100
Publicado: — · Última mod.: —
Produto
Sangoma / FreePBX
Vulnerabilidade
Sangoma FreePBX Improper Authentication Vulnerability
Adicionado ao KEV
3 de fev. de 2026
Corrigir até
24 de fev. de 2026
Uso conhecido em ransomware
Não
Descrição resumida
Sangoma FreePBX contains an improper authentication vulnerability that potentially allows unauthorized users to bypass password authentication and access services provided by the FreePBX admin.
Ação necessária
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Notas
https://wiki.freepbx.org/display/FOP/2019-11-20%2BRemote%2BAdmin%2BAuthentication%2BBypass ; https://nvd.nist.gov/vuln/detail/CVE-2019-19006