Sangoma

Records98All Threatist records

Exploited (KEV)4In CISA KEV

CVSS critical21CVSS 9.0–10.0

CVSS high41CVSS 7.0–8.9

Exploited now

Sangoma records in CISA KEV

TI-2026-08422 Sangoma Switchvox SQL Injection Vulnerability CRITICAL 99KEV 2026-09-02 TI-2019-13698 Sangoma FreePBX Improper Authentication Vulnerability CRITICAL 100KEV 2026-02-03 TI-2025-39763 Sangoma FreePBX OS Command Injection Vulnerability CRITICAL 96KEV 2026-02-03 TI-2025-35702 Sangoma FreePBX Authentication Bypass Vulnerability CRITICAL 100KEV 2025-08-29

Components

Products in the NVD configurations · select one to filter the records

Freepbx 50 records CRITICAL Asterisk 28 records HIGH Certified Asterisk 15 records HIGH Restapps 2 records MEDIUM Session Border Controller Firmware 2 records MEDIUM Switchvox 2 records CRITICAL Voicemail 2 records LOW Filestore 1 record CRITICAL

Records

1 record in Filestore · all components

TI-2025-39763 CVE-2025-64328

FreePBX Administration GUI is Vulnerable to Authenticated Command Injection

CRITICAL 96KEV

FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.84618 Published 2025-11-07 Fixed in 17.0.3 CWE-78

Open these records in search →