[ CVE-2026-63314 · Published 15 Oct 2026 ]
Vulnerability in Slican IPx
CVSS 8.7
EPSS <1%No fix listed yet
[ Description ]Official description
WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/admin_json.php enpoint. Improper neutralization of input allows an authenticated attacker to execute SQL Injection attacks. This issue was fixed in IPx series version 6.62.0100.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.