[ Vendor · 4 CVEs ]
Sangoma
CVEs affecting Sangoma published in the last 30 days, plus any Sangoma CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-9586 | 17 Jul 2026 | CVSS 9.8 | Sangoma Switchvox SQL InjectionAn unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The /pa endpoint processes XML content beginning… | Exploited |
| CVE-2025-64328 | 7 Nov 2025 | CVSS 7.2 | Sangoma FreePBX OS Command InjectionFreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. In versions 17.0.2.36 and above before 17.0.3, the… | Exploited |
| CVE-2025-57819 | 28 Aug 2025 | CVSS 9.8 | Sangoma FreePBX Authentication BypassFreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable due to insufficiently sanitized… | Exploited |
| CVE-2019-19006 | 21 Nov 2019 | CVSS 9.8 | Sangoma FreePBX Improper AuthenticationSangoma FreePBX 115.0.16.26 and below, 14.0.13.11 and below, 13.0.197.13 and below have Incorrect Access Control. | Exploited |