ACTIEF MISBRUIKT
CVE-2019-19006: Sangoma FreePBX Improper Authentication Vulnerability
| Leverancier | Sangoma |
|---|---|
| Product | FreePBX |
| Actief misbruikt | Ja |
| Toegevoegd aan CISA KEV | 3 feb 2026 |
| CISA-deadline (Amerikaanse overheid) | 24 feb 2026 |
| Zwakte (CWE) | CWE-287 |
Vereiste actie (tekst van CISA, Engels)
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Beschrijving (NVD, Engels)
Sangoma FreePBX contains an improper authentication vulnerability that potentially allows unauthorized users to bypass password authentication and access services provided by the FreePBX admin.
BRONNEN
Andere lekken bij Sangoma
- CVE-2026-9586: Sangoma Switchvox SQL Injection Vulnerability
- CVE-2025-64328: Sangoma FreePBX OS Command Injection Vulnerability
- CVE-2025-57819: Sangoma FreePBX Authentication Bypass Vulnerability
Gegevens van NVD, CISA KEV, FIRST EPSS en adviezen van leveranciers. Bijgewerkt 10 nov 2026.