https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T07:53:17.041163+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-67513 CVE-2025-67513 — FreePBX Endpoint Manager's Weak Default Password Allows Unauthenticated Access in Endpoint Module REST API 2026-10-08T07:53:17.076591+00:00

Affected: FreePBX endpoint

FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions prior to 16.0.96 and 17.0.1 through 17.0.9 have a weak default password. By default, this is a 6 digit numeric value which can be brute forced. (This is the app_password parameter). Depending on local configuration, this password could be the extension, voicemail, user manager, DPMA or EPM phone admin password. This issue is fixed in versions 16.0.96 and 17.0.10.