Log in Start free

Sangoma

Products

ProductCVEsExploitedLatest
Switchvox SMB Edition41Jul 17, 2026
FreePBX1–Dec 2, 2024
Switchvox1–May 12, 2026

Exploited and recent CVEs

  • CVE-2026-9586 Critical 9.3 Exploited Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMB 19.0%
  • CVE-2026-9588 High 7.0 Authenticated Stored Cross-Site Scripting (XSS) in Switchvox SMB Web Portal 0.4%
  • CVE-2026-9587 High 7.1 Authenticated Local File Inclusion (LFI) in Switchvox SMB Web Portal 0.4%
  • CVE-2026-9585 High 8.6 Unauthenticated Reflected Cross-Site Scripting (XSS) in Switchvox SMB Web Portal 0.6%
  • CVE-2026-45362 Low 3.2 Sangoma Switchvox before 8.4 places cleartext SIP authentication credentials in a backup file. <0.1%
  • CVE-2024-53564 Low 2.2 A vulnerability was discovered in FreePBX 17.0.19.17. It does not verify the type of uploaded (valid FreePBX module) files, allowing high-privilege administrators to insert unwanted files. NOTE: the S 0.3%