ctrlINT What the industry said about every indicator, with the quote

CVE-2019-19006Vulnerability

Sangoma FreePBX Improper Authentication Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .

Reported by 1 independent source · first reported by NCSC UK · last reported

Last reported 4 years ago

CISA KEVAdded 3 Feb 2026
Fix due 24 Feb 2026
Used by ransomware: not knownCISA KEV catalogue
EPSS55.9%
higher than 99% of CVEsFIRST EPSS, as of 23 Oct 2026

What the reports say

1 report, newest first · the exact sentence from each

  1. “The attackers exploited CVE-2019-19006, a critical vulnerability in Sangoma and Asterisk VoIP phone systems that allows outsiders to remotely gain access without any form of authentication.”

    NCSC UKGovernment
    Organisational use of Enterprise Connected Devices

Thanks — we review every report.

Report a wrong value
What is wrong with CVE-2019-19006 here?
No account needed. We do not store your IP address.