CVE-2025-59056 | FreePBX up to 15.0.37/16.0.40/17.0.20 Administrator Control Panel Web Interface path traversal (GHSA-frc2-jhgg-rwpr)

September 16, 2025 Yanac

A vulnerability was found in FreePBX up to 15.0.37/16.0.40/17.0.20 and classified as critical. This issue affects some unknown processing of the component Administrator Control Panel Web Interface. Executing manipulation can lead to path traversal.

This vulnerability appears as CVE-2025-59056. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More