FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. In versions prior to 16.0.92 for FreePBX 16 and versions prior to 17.0.6 for FreePBX 17, the Endpoint Manager module contains an authenticated arbitrary file upload vulnerability affecting the fwbrand parameter. The fwbrand parameter allows an attacker to change the file path. Combined, these issues can result in a webshell being uploaded. Authentication with a known username is required to exploit this vulnerability. Successful exploitation allows authenticated users to upload arbitrary files to attacker-controlled paths on the server, potentially leading to remote code execution. This issue has been patched in version 16.0.92 for FreePBX 16 and version 17.0.6 for FreePBX 17.

According to its self-reported version number, the FreePBOX application running on the remote host is prior to 16.0.92 or 17.x prior to 17.0.6. It is, therefore, affected by multiples vulnerabilities :

- An arbitrary file upload vulnerability in the FreePBX Endpoint Management module affecting the fwbrand parameter.

- SQL injection vulnerabilities exist in the FreePBX Endpoint Management module affecting multiple parameters.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
115084	FreeBPX 17.0.x < 17.0.6 Multiples Vulnerabilities	Web App Scanning	Component Vulnerability	Version Based	high
115083	FreeBPX < 16.0.92 Multiples Vulnerabilities	Web App Scanning	Component Vulnerability	Version Based	high

Detections

Analytics

CVE-2025-61678

high

Tenable Plugins

high

high