vendor1 exploited in the wild

Sangoma

5 CVEs published in the last four months and 1 stories. Exploited flaws first.

Critical2

High3

Medium0

Exploited (KEV)1

Patch these first

CVE	CVSS	Severity	Product	Summary	Published
CVE-2026-9586exploited	9.8	critical	switchvox	An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997).	102d ago

All recent CVEs

CVE	CVSS	Severity	Product	Summary	Published
CVE-2026-46376	9.8	critical	freepbx	FreePBX is an open source IP PBX.	151d ago
CVE-2026-9586exploited	9.8	critical	switchvox	An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997).	102d ago
CVE-2026-44238	8.8	high	freepbx	FreePBX is an open source IP PBX.	151d ago
CVE-2026-44239	8.8	high	freepbx	FreePBX is an open source IP PBX.	151d ago
CVE-2026-44237	8.1	high	freepbx	FreePBX is an open source IP PBX.	151d ago

Filter the full tracker by Sangoma →

Our coverage of Sangoma

CVE-2026-9586Sep 2, 2026

Hackers exploit Sangoma Switchvox flaw to deploy reverse shells

Attackers are actively exploiting an unauthenticated SQL injection vulnerability in Sangoma's Switchvox VoIP platform, designated CVE-2026-9586, to achieve remote code execution and deploy reverse shells. Security researchers at Horizon3, who discovered the flaw, indicate that a significant number of internet-exposed Switchvox systems have likely already been targeted or are at imminent risk.