Vulnerabilities

TI-2026-74686 CVE-2026-63315

Plaintext storage of a password in Slican IPx WebCTI

LOW 35

WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00288 Published 2026-10-15 Fixed in 6.62.0100 CWE-256

TI-2026-74685 CVE-2026-63314

LOW 39

WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/admin_json.php enpoint.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00225 Published 2026-10-15 Fixed in 6.62.0100 CWE-89

TI-2026-74684 CVE-2026-35088

LOW 34

Slican telephone exchanges use symmetric encryption for TCP/IP communication.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00117 Published 2026-10-15 Fixed in 6.62.0100 CWE-326