CVE · coverage timeline
CVE-2025-64328Sangoma FreePBX OS Command Injection Vulnerability
7 articles from 4 outlets between 2 Feb and 27 May. First reported by SecurityOnline; added to CISA KEV 1 day later. The busiest day was Fri 27 Feb, with 2 articles.
- Articles
- 7
- all time · from 4 outlets
- Days with coverage
- 6
- across 115 days
- Busiest day
- 2
- articles on Fri 27 Feb
- Last 7 days
- 0a day
- vs 0 a day before
- First report to KEV
- 1day
- listed 3 Feb
- Federal deadline
- Passed
- Tue 24 Feb · 243 days ago
Coverage over time
7 articles · 2 Feb – 27 May
- First report2 Feb · SecurityOnline
- Added to CISA KEV3 Feb · cisa.gov
- Federal deadlineTue 24 Feb, 23:59 UTC
Show as table
| Day (UTC) | Articles | Outlets |
|---|---|---|
| Mon 2 Feb | 1 | SecurityOnline 1 |
| Tue 3 Feb | 1 | Security Affairs 1 |
| Wed 4 Feb | 1 | SecurityWeek 1 |
| Fri 27 Feb | 2 | SecurityWeek 1, The Hacker News 1 |
| Sun 1 Mar | 1 | Security Affairs 1 |
| Wed 27 May | 1 | SecurityOnline 1 |
Articles
7 articles1 article
1 article
2 articles
- CVE-2025-64328 fuels 900 FreePBX infections via EncystPHPThe Hacker News
1 article
- Fresh SolarWinds Vulnerability Exploited in AttacksSecurityWeek · mentions it in passing
1 article
- U.S. CISA adds SolarWinds Web Help Desk, Sangoma FreePBX, and GitLab flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs · mentions it in passing
1 article
- Silent Intruder: “EncystPHP” Web Shell Burrows into FreePBX SystemsSecurityOnline · first report
No articles in this range.