Sangoma

Records98All Threatist records

Exploited (KEV)4In CISA KEV

CVSS critical21CVSS 9.0–10.0

CVSS high41CVSS 7.0–8.9

Exploited now

Sangoma records in CISA KEV

TI-2026-08422 Sangoma Switchvox SQL Injection Vulnerability CRITICAL 99KEV 2026-09-02 TI-2019-13698 Sangoma FreePBX Improper Authentication Vulnerability CRITICAL 100KEV 2026-02-03 TI-2025-39763 Sangoma FreePBX OS Command Injection Vulnerability CRITICAL 96KEV 2026-02-03 TI-2025-35702 Sangoma FreePBX Authentication Bypass Vulnerability CRITICAL 100KEV 2025-08-29

Components

Products in the NVD configurations · select one to filter the records

Freepbx 50 records CRITICAL Asterisk 28 records HIGH Certified Asterisk 15 records HIGH Restapps 2 records MEDIUM Session Border Controller Firmware 2 records MEDIUM Switchvox 2 records CRITICAL Voicemail 2 records LOW Filestore 1 record CRITICAL

Records

2 records in Switchvox · all components

TI-2026-08422 CVE-2026-9586 · GHSA-m32j-v93f-gfgc

Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMB

CRITICAL 99KEV

An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997).

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.18979 Published 2026-07-17 Fixed in 8.4.0.2 CWE-89

TI-2021-20477 CVE-2021-45310 · GHSA-5jhr-vv8x-5wg9

Sangoma Technologies Corporation Switchvox Version 102409 is affected by an information…

LOW 26

Sangoma Technologies Corporation Switchvox Version 102409 is affected by an information disclosure vulnerability due to an improper access restriction.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00898 Published 2022-02-14 No fix listed CWE-200

Open these records in search →

Critical	21
High	41
Medium	34
Low	2
No CVSS	0