CVE-2025-64328
Known exploited · CISA KEV
CVSS 7.2 HIGH: freePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. EPSS 85% (100th percentile).
CISA federal remediation date Feb 24 · date passed
Vulnerabilities · 224 days ago
The release also adds an LDAP query option to skip SACL data for non-privileged queries and includes two enhancements and seven bug fixes.
Known exploited · CISA KEV
CVSS 7.2 HIGH: freePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. EPSS 85% (100th percentile).
CISA federal remediation date Feb 24 · date passed
CVSS 9.8 CRITICAL: aVideo is a video-sharing Platform software. EPSS 9% (95th percentile).
1 source covering this story
Key additions include new exploit modules for: AVideo Encoder getImage.php Unauthenticated Command Injection (CVE-2026-29058).
Part of the PlainSec briefing for 2026-03-21