CISA Known Exploited Vulnerability
This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.
Remediation Deadline: Feb 24, 2026
Description
Sangoma FreePBX Endpoint Manager contains an OS command injection vulnerability that could allow for a post-authentication command injection by an authenticated known user via the testconnection -> check_ssh_connect() function. An attacker can leverage this vulnerability to potentially obtain remote access to the system as an asterisk user.
EPSS — Exploit Probability
Higher than 97.8% of all CVEs
Required Action
https://github.com/FreePBX/security-reporting/security/advisories/GHSA-vm9p-46mv-5xvw ; https://nvd.nist.gov/vuln/detail/CVE-2025-64328
Risk Assessment
HIGHDetails
- Severity
- High
- EPSS
- 50.8%
- CISA KEV
- Yes
- Ransomware
- Unknown
- Articles
- 1
Timeline
Published
Feb 3, 2026
Added to KEV
Feb 3, 2026
Remediation Due
Feb 24, 2026