Vulnerabilidades do Sangoma Switchvox

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Sangoma Switchvox: 2 registro(s), com versões afetadas e correções.
cpe:2.3:a:sangoma:switchvox

CVE-2026-9586 Crítica · 9.8 KEV Urgente · 73 Exploit público CWE-89 17/07/2026

Sangoma Switchvox SQL Injection Vulnerability

An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The /pa endpoint processes XML content beginning with <PolycomIPPhone> and directly concatenates the user-controlled PhoneIP value into PostgreSQL queries without sanitization or parameterization. An unauthenticated remote attacker can execute arbitrary SQL statements against the backend PostgreSQL database using a single crafted request, including database operations and remote code execution.

CVE-2026-45362 Baixa · 3.2 CWE-312 11/05/2026

Cleartext Storage of Sensitive Information em Sangoma Switchvox

Sangoma Switchvox before 8.4 places cleartext SIP authentication credentials in a backup file.