Skip to content
OpenAdvisories

Vendor

Sangoma

7 known vulnerabilities.

Products

Switchvox SMB Edition 4 FreePBX 1 cg6kwin2k.sys 1 Switchvox 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-9586 Exploited Public exploit Scanner template EPSS 19%

    Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMB

    An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The /pa endpoint processes XML content beginning with <PolycomIPPhone> and directly concatenates the user-controlled PhoneIP value into PostgreSQL queries wit…

    Sangoma Switchvox SMB Edition
    KEV Sep 2, 2026