Sangoma

Records98All Threatist records

Exploited (KEV)4In CISA KEV

CVSS critical21CVSS 9.0–10.0

CVSS high41CVSS 7.0–8.9

Exploited now

Sangoma records in CISA KEV

TI-2026-08422 Sangoma Switchvox SQL Injection Vulnerability CRITICAL 99KEV 2026-09-02 TI-2019-13698 Sangoma FreePBX Improper Authentication Vulnerability CRITICAL 100KEV 2026-02-03 TI-2025-39763 Sangoma FreePBX OS Command Injection Vulnerability CRITICAL 96KEV 2026-02-03 TI-2025-35702 Sangoma FreePBX Authentication Bypass Vulnerability CRITICAL 100KEV 2025-08-29

Components

Products in the NVD configurations · select one to filter the records

Freepbx 50 records CRITICAL Asterisk 28 records HIGH Certified Asterisk 15 records HIGH Restapps 2 records MEDIUM Session Border Controller Firmware 2 records MEDIUM Switchvox 2 records CRITICAL Voicemail 2 records LOW Filestore 1 record CRITICAL

Records

2 records in Voicemail · all components

TI-2021-03140 CVE-2021-4282 · GHSA-gcm3-4rwm-4xx9

FreePBX voicemail page.voicemail.php cross site scripting

LOW 28

A vulnerability was found in FreePBX voicemail.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0056 Published 2022-12-27 No fix listed CWE-79

TI-2021-03141 CVE-2021-4283 · GHSA-pqgg-xh9j-6h6q

FreeBPX voicemail Settings ssettings.php cross site scripting

LOW 25

A vulnerability was found in FreeBPX voicemail.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00557 Published 2022-12-27 No fix listed CWE-79

Open these records in search →