Vulnerabilities in Sangoma

6 results

Vexday analysis

Sangoma apresenta 6 vulnerabilidades catalogadas, com 5 publicadas nos últimos 90 dias, indicando risco recente e ativo no portfólio. Nenhuma está sob exploração documentada em campo, mas uma classificada como crítica demanda atenção; a fraqueza dominante é injeção de script (CWE-79), típica de aplicações web, sugerindo vetores de ataque via interface.

CVE-2026-9586CRITICALUnauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMBEPSS 0.4%CVE-2024-53564LOWA vulnerability was discovered in FreePBX 17.0.19.17. It does not verify the type of uploaded (valid FreePBX module) files, allowing high-prEPSS 0.3%CVE-2026-9585HIGHUnauthenticated Reflected Cross-Site Scripting (XSS) in Switchvox SMB Web PortalEPSS 0.3%CVE-2026-9588HIGHAuthenticated Stored Cross-Site Scripting (XSS) in Switchvox SMB Web PortalEPSS 0.2%CVE-2026-9587HIGHAuthenticated Local File Inclusion (LFI) in Switchvox SMB Web PortalEPSS 0.2%CVE-2026-45362LOWSangoma Switchvox before 8.4 places cleartext SIP authentication credentials in a backup file.EPSS 0.1%