Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 35 added in the last 30 days, latest on Nov 6, 2026.
4 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Sep 2, 2026 | CVE-2026-9586 | Sangoma · Switchvox | Sangoma Switchvox SQL Injection Vulnerability | Critical 9.3 | 19.0% | Sep 5, 2026 |
| Feb 3, 2026 | CVE-2025-64328 | Sangoma · FreePBX | Sangoma FreePBX OS Command Injection Vulnerability | High 8.6 | 84.6% | Feb 24, 2026 |
| Feb 3, 2026 | CVE-2019-19006 | Sangoma · FreePBX | Sangoma FreePBX Improper Authentication Vulnerability | Critical 9.8 | 54.7% | Feb 24, 2026 |
| Aug 29, 2025 | CVE-2025-57819 | Sangoma · FreePBX | Sangoma FreePBX Authentication Bypass Vulnerability | Critical 10.0 | 95.2% | Sep 19, 2025 |