{"cve_id":"CVE-2025-64328","title":"FreePBX  >= 17.0.2.36 && < 17.0.3 - Authenticated Command Injection","severity":"critical","actively_exploited":true,"patterns":["/admin/ajax.php","/admin/config.php"],"events":58,"unique_ips":9,"actors":[{"ip":"51.159.71.139","events":15,"country_code":"FR","country":"France","org":"Scaleway SAS","rdns":"51-159-71-139.rev.poneytelecom.eu","scanner_tag":null},{"ip":"178.128.212.46","events":11,"country_code":"SG","country":"Singapore","org":"DigitalOcean, LLC","rdns":"","scanner_tag":null},{"ip":"62.76.229.13","events":10,"country_code":"NL","country":"The Netherlands","org":"Mynymbox Hosting LLC","rdns":"static.13.229.76.62.virtservers.com","scanner_tag":null},{"ip":"45.148.10.166","events":9,"country_code":"NL","country":"The Netherlands","org":"Techoff Srv Limited","rdns":"","scanner_tag":null},{"ip":"45.81.23.7","events":8,"country_code":"NL","country":"The Netherlands","org":"Alsycon B.V.","rdns":"server.hostdel.com","scanner_tag":null},{"ip":"185.177.72.51","events":2,"country_code":"FR","country":"France","org":"Bucklog SARL","rdns":"","scanner_tag":null},{"ip":"185.177.72.68","events":1,"country_code":"FR","country":"France","org":"Bucklog SARL","rdns":"","scanner_tag":null},{"ip":"185.177.72.69","events":1,"country_code":"FR","country":"France","org":"Bucklog SARL","rdns":"","scanner_tag":null},{"ip":"185.177.72.52","events":1,"country_code":"FR","country":"France","org":"Bucklog SARL","rdns":"","scanner_tag":null}],"top_asns":[{"asn":12876,"org":"Scaleway SAS","events":15,"ips":1},{"asn":14061,"org":"DigitalOcean, LLC","events":11,"ips":1},{"asn":211673,"org":"Mynymbox Hosting LLC","events":10,"ips":1},{"asn":48090,"org":"Techoff Srv Limited","events":9,"ips":1},{"asn":49870,"org":"Alsycon B.V.","events":8,"ips":1},{"asn":211590,"org":"Bucklog SARL","events":5,"ips":4}],"fingerprints":{"ja4h":["ge11nn0500_2d30dc89d981","ge11nn14en_068ebe3632ec","ge11nn0200_e5a56608905c","ge10nn0300_47c2bbddfa85","ge11nn0500_cac2c496544b"],"ja4":["t13i3111h1_e8f1e7e78f70_d41ae481755e","t13i990900_760e5dff8384_5ac7197df9d2","t13i1010h2_18ef40b21276_879711aa9f16"]},"sample_paths":["/admin/config.php","//admin/ajax.php?module=FreePBX%5C%5Cmodules%5C%5Cendpoint%5C%5Cajax&command=model&model=model&template=template&brand=brand'"],"timeline":[{"day":"2026-06-24","events":10,"ips":2},{"day":"2026-06-25","events":1,"ips":1},{"day":"2026-06-26","events":13,"ips":2},{"day":"2026-06-27","events":12,"ips":3},{"day":"2026-06-28","events":13,"ips":3},{"day":"2026-06-29","events":6,"ips":2},{"day":"2026-06-30","events":3,"ips":3}],"window_hours":168}