Sangoma vulnerabilities
6 published CVEs name Sangoma among the affected products; CISA lists 1 of them as exploited in the wild.
- Published CVEs
- 6
- Last 12 months
- 5
- Critical
- 1
- Known exploited
- 1
Critical 1High 3Medium 0Low 2Not scored 0
CVEs per yearBy the year they were published
- 20241
- 20265
Known exploitedNewest addition to KEV first
- CVE-2026-9586
Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMB
Sangoma · Switchvox SMB Edition
ExploitedCritical9.3
Newest CVEs
- CVE-2026-9588
Authenticated Stored Cross-Site Scripting (XSS) in Switchvox SMB Web Portal
Sangoma · Switchvox SMB Edition
High7.0 - CVE-2026-9587
Authenticated Local File Inclusion (LFI) in Switchvox SMB Web Portal
Sangoma · Switchvox SMB Edition
High7.1 - CVE-2026-9586
Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMB
Sangoma · Switchvox SMB Edition
ExploitedCritical9.3 - CVE-2026-9585
Unauthenticated Reflected Cross-Site Scripting (XSS) in Switchvox SMB Web Portal
Sangoma · Switchvox SMB Edition
High8.6 - CVE-2026-45362
Sangoma Switchvox before 8.4 places cleartext SIP authentication credentials in a backup file.
Sangoma · Switchvox
Low3.2 - CVE-2024-53564
A vulnerability was discovered in FreePBX 17.0.19.17. It does not verify the type of uploaded (valid FreePBX module) files, allowing high-privilege…
Sangoma · FreePBX
Low2.2