<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: freepbx-endpoint</title><description>Every new CVE for freepbx-endpoint.</description><link>https://agentprime.io/</link><item><title>CVE-2025-67513: FreePBX Endpoint Manager&apos;s Weak Default Password Allows Unauthenticated Access in Endpoint Module REST API</title><link>https://agentprime.io/advisories/CVE-2025-67513/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-67513/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 10 Dec 2025 22:43:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-61675: FreePBX Endpoint Manager vulnerable to authenticated SQL injection in multiple configuration parameters</title><link>https://agentprime.io/advisories/CVE-2025-61675/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-61675/</guid><description>CVSS 8.6 (High). Critical: CVSS score 8.6 (7.0 or more) and EPSS 0.40 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Oct 2025 19:30:27 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-59051: FreePBX Endpoint Manager command injection via Network Scanning feature</title><link>https://agentprime.io/advisories/CVE-2025-59051/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-59051/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Oct 2025 19:15:54 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-57819: FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE</title><link>https://agentprime.io/advisories/CVE-2025-57819/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-57819/</guid><description>CVSS 10.0 (Critical). Critical: In CISA’s KEV catalogue since 29 Aug 2025: it is known to be exploited. CVSS score 10.0: 9.0 or more. CVSS score 10.0 (7.0 or more) and EPSS 0.95 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 28 Aug 2025 16:45:18 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item></channel></rss>