{"vulnerability": "GHSA-M42G-XG4C-5F3H", "sightings": [{"uuid": "c5229c9f-f9ef-451d-ab64-bea25422bf81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-m42g-xg4c-5f3h", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115107430229598200", "content": "", "creation_timestamp": "2025-08-28T16:53:19.021548Z"}, {"uuid": "7c229332-5083-4108-b748-7277861dab34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-M42G-XG4C-5F3H", "type": "seen", "source": "https://t.me/brutsecurity/2189", "content": "CVE-2025-57819: Authentication Bypass in FreePBX Administrator, 10.0 rating \ud83d\udd25\ud83d\udd25\ud83d\udd25\n\nA critical zero-day vulnerability in FreePBX could allow an attacker to perform SQL injection and RCE. Exploitation has already been observed in the wild!\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/ebwk9\n\ud83d\udc49 Dork: http.favicon.hash_sha256:dfc3cc989bec09d968e978cde336709c655fa85469fd482ac10e17942da80be9\n\nVendor's advisory: https://github.com/FreePBX/security-reporting/security/advisories/GHSA-m42g-xg4c-5f3h", "creation_timestamp": "2026-07-09T03:00:06.611066Z"}, {"uuid": "375ec3a7-47fe-4d26-aedb-0d4a0ca3e4a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-M42G-XG4C-5F3H", "type": "seen", "source": "https://t.me/brutsecurity/2189", "content": "CVE-2025-57819: Authentication Bypass in FreePBX Administrator, 10.0 rating \ud83d\udd25\ud83d\udd25\ud83d\udd25\n\nA critical zero-day vulnerability in FreePBX could allow an attacker to perform SQL injection and RCE. Exploitation has already been observed in the wild!\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/ebwk9\n\ud83d\udc49 Dork: http.favicon.hash_sha256:dfc3cc989bec09d968e978cde336709c655fa85469fd482ac10e17942da80be9\n\nVendor's advisory: https://github.com/FreePBX/security-reporting/security/advisories/GHSA-m42g-xg4c-5f3h", "creation_timestamp": "2026-07-10T00:00:14.048721Z"}, {"uuid": "26875a7b-d423-4f0b-bd62-561724e4ffa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-M42G-XG4C-5F3H", "type": "exploited", "source": "https://t.me/brutsecurity/2189", "content": "CVE-2025-57819: Authentication Bypass in FreePBX Administrator, 10.0 rating \ud83d\udd25\ud83d\udd25\ud83d\udd25\n\nA critical zero-day vulnerability in FreePBX could allow an attacker to perform SQL injection and RCE. Exploitation has already been observed in the wild!\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/ebwk9\n\ud83d\udc49 Dork: http.favicon.hash_sha256:dfc3cc989bec09d968e978cde336709c655fa85469fd482ac10e17942da80be9\n\nVendor's advisory: https://github.com/FreePBX/security-reporting/security/advisories/GHSA-m42g-xg4c-5f3h", "creation_timestamp": "2026-07-11T11:00:04.262453Z"}, {"uuid": "d929d86e-6fc1-4cef-b8c3-0751e88154ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-M42G-XG4C-5F3H", "type": "exploited", "source": "https://t.me/brutsecurity/2189", "content": "CVE-2025-57819: Authentication Bypass in FreePBX Administrator, 10.0 rating \ud83d\udd25\ud83d\udd25\ud83d\udd25\n\nA critical zero-day vulnerability in FreePBX could allow an attacker to perform SQL injection and RCE. Exploitation has already been observed in the wild!\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/ebwk9\n\ud83d\udc49 Dork: http.favicon.hash_sha256:dfc3cc989bec09d968e978cde336709c655fa85469fd482ac10e17942da80be9\n\nVendor's advisory: https://github.com/FreePBX/security-reporting/security/advisories/GHSA-m42g-xg4c-5f3h", "creation_timestamp": "2026-07-12T00:00:50.855385Z"}]}