PBXact System 2001
PBXT-UCS-2001
Appliance
· Phone System Series
Is the PBXact System 2001 still supported?
No. Sangoma ended support for the PBXact System 2001 on 2024-10-01. No further security fixes will be issued. See Sangoma's lifecycle bulletin.
When does the PBXact System 2001 reach end of support?
Sangoma support for the PBXact System 2001 ends on 2024-10-01.
What replaces the PBXact System 2001?
Sangoma has not published a successor model for the PBXact System 2001.
What known-exploited CVEs apply to the PBXact System 2001 past end of support?
3 CVEs in CISA's Known Exploited Vulnerabilities catalog apply to the platform the PBXact System 2001 runs. These will not be patched on this device because it is past the Sangoma security-support date. See the Known Exploited Vulnerabilities table below for the full list.
Known Exploited Vulnerabilities
This device is past Sangoma's security-support date. 3 CVEs in CISA's Known Exploited Vulnerabilities catalog apply to the platform it runs. Sangoma is not issuing patches for this model. Isolate, compensate, or refresh.
| CVE | KEV added | Vulnerability | Flags |
|---|---|---|---|
CVE-2025-64328
|
Sangoma FreePBX OS Command Injection Vulnerability | ||
CVE-2019-19006
|
Sangoma FreePBX Improper Authentication Vulnerability | ||
CVE-2025-57819
|
Sangoma FreePBX Authentication Bypass Vulnerability |
Source: CISA Known Exploited Vulnerabilities catalog. The Ransomware flag reflects CISA's own knownRansomwareCampaignUse field, set when the CVE has been observed in ransomware campaigns per their threat intel. It's not a property of the vulnerability description itself.
Correlation is at the platform level, not per-OS-version. Not exhaustive: KEV only lists actively-exploited CVEs and many relevant unexploited vulnerabilities are not here. Verify against vendor security advisories (PSIRT, JSA, PAN-SA) and NVD before acting. See compensating controls if refresh isn't immediate.
PBXact System 2001 Lifecycle Overview
The Sangoma PBXact System 2001 (PBXT-UCS-2001) is a appliance product in the Sangoma Phone System series. This product has reached end of life as of , meaning Sangoma no longer provides technical support, software updates, or hardware replacement for this product. It was last available for purchase on . Organizations still running the PBXact System 2001 should plan a migration .
Lifecycle Milestones
| End of sale | 3y 1mo ago | |
|---|---|---|
| Last date of support | 2y 1mo ago |
Additional Dates
| Added To Eol Date | 3y 1mo ago |
|---|