The Hacker News·Dec 15, 2025 criticalFreePBX Patches Critical SQLi, File-Upload, and AUTHTYPE Bypass Flaws Enabling RCE#cve-2025-61675#cve-2025-61678#cve-2025-66039 in the wild 3 min