Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Kobikom Telecommunications and Informatics Services Inc.
CVSS 3.1HIGH 7.5·Network·No auth·No interaction·EPSS 0.00378·Published 2026-11-05·Fixed in KobiPBX-FOP3-SEC-r1CWE-89
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Kobikom Telecommunications and Informatics Services Inc.
CVSS 3.1HIGH 7.5·Network·No auth·No interaction·EPSS 0.0046·Published 2026-11-05·Fixed in KobiPBX-FOP3-SEC-r1CWE-22