Skip to content
OpenAdvisories

Vendor

Sangoma

7 known vulnerabilities.

Products

Switchvox SMB Edition 4 FreePBX 1 cg6kwin2k.sys 1 Switchvox 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.0
    CVE-2026-9588

    Authenticated Stored Cross-Site Scripting (XSS) in Switchvox SMB Web Portal

    A stored cross-site scripting (XSS) vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997) within the voicemail notification template functionality. The submit_modify_voicemail_template endpoint fails to properly sanitize HTML content supplied by …

    Sangoma Switchvox SMB Edition
  • High 7.1
    CVE-2026-9587

    Authenticated Local File Inclusion (LFI) in Switchvox SMB Web Portal

    An authenticated local file inclusion vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The play_file functionality accepts user-controlled input through the sound_path parameter and fails to properly validate file paths before accessing the…

    Sangoma Switchvox SMB Edition
  • High 8.6
    CVE-2026-9585

    Unauthenticated Reflected Cross-Site Scripting (XSS) in Switchvox SMB Web Portal

    An unauthenticated reflected cross-site scripting (XSS) vulnerability exists in Sangoma Switchvox SMB Edition version 8.3 (104997). The application fails to properly sanitize the portal parameter supplied to the invalid_browser and invalid_browser_login handl…

    Sangoma Switchvox SMB Edition