FreePBX Zero-Day Chaos: Hackers Turn Business Phones into Prank Hotlines!
Experts are sounding the alarm about an actively exploited FreePBX zero-day vulnerability, CVE-2025-57819. This critical flaw, boasting a CVSS score of 10.0, affects systems with publicly exposed admin control panels. Time to update FreePBX and restrict public ACP access before hackers turn your business phone system into their personal playground!
Hot Take:
Forget about your usual Tuesday morning coffee run because FreePBX just gave everyone a wake-up call worthy of a CVSS score of 10.0! If you’ve been using FreePBX to make your phone system sing, it might be time to start singing the blues—unless you enjoy unauthorized users waltzing right through your admin control panel. Buckle up, folks; it’s going to be a bumpy ride through the VoIP jungle!
Key Points:
– A zero-day vulnerability, CVE-2025-57819, is actively exploited in FreePBX with a CVSS score of 10.0.
– The flaw allows unauthorized access, database manipulation, and remote code execution.
– Affected versions include FreePBX 15, 16, and 17, with inadequate IP filtering.
– Administrators should update FreePBX, restrict public ACP access, and check for IoCs.
– Majority of vulnerable systems are located in the US, Russia, and Germany.