---
id: 10190
title: "The FreePBX Rabbit Hole: CVE-2025-66039 and others"
cve: CVE-2025-66039
source_domain: horizon3.ai
source_url: "https://horizon3.ai/attack-research/the-freepbx-rabbit-hole-cve-2025-66039-and-others/"
published_at: "2025-12-11T19:39:36Z"
tags: ["rce", "vulnerability-research", "sql-injection", "auth-bypass"]
phying_url: "https://phying.com/item/10190"
lang: en
---

# The FreePBX Rabbit Hole: CVE-2025-66039 and others

## Summary

Horizon3 uncovers FreePBX flaws, including CVE-2025-66039 auth bypass, SQL injection, and file upload RCE—and shows how NodeZero detects them.

## Intelligence Metadata

- **Sources:** horizon3.ai
- **CVE:** CVE-2025-66039
- **Published:** 2025-12-11T19:39:36Z
- **Original:** https://horizon3.ai/attack-research/the-freepbx-rabbit-hole-cve-2025-66039-and-others/
- **Phying News:** https://phying.com/item/10190