Vulnerability Intelligence Report
FreePBX Endpoint Manager command injection via Network Scanning feature
CVE-2025-59051
The FreePBX Endpoint Manager module includes a Network Scanning feature that provides web-based access to nmap functionality for network device discovery. In Endpoint Manager 16 before 16.0.92 and 17 before 17.0.6, insufficiently sanitized user-supplied input allows authenticated OS command execution as the asterisk user. Authentication with a known username is required. Updating to Endpoint Manager 16.0.92 or 17.0.6 addresses the issue.
No Active Exploit Signals
CVSS Base Score
8.6
HIGH
EPSS Probability:0.65%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-78 ↗CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| FreePBX | endpoint | < 16.0.92 (affected), >= 17.0.0, < 17.0.6 (affected) |
Threat Intelligence Signals
EPSS Score
0.649%
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | GitHub, Inc. · Vendor · USA |
| Reserved | 2025-09-08T16:19:26 |
| Published | 2025-10-14T19:15:54 |
| Last Updated | 2026-02-13T21:59:27 |
Community Chatter & Buzz