[ Vendor · 3 CVEs ]
Slican
CVEs affecting Slican published in the last 30 days, plus any Slican CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-35088 | 15 Oct 2026 | CVSS 8.2 | Slican IPxSlican telephone exchanges use symmetric encryption for TCP/IP communication. Secret key is hardcoded in multiple binary files. An attacker who has… | |
| CVE-2026-63314 | 15 Oct 2026 | CVSS 8.7 | Slican IPxWebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/admin_json.php enpoint. Improper neutralization of input… | |
| CVE-2026-63315 | 15 Oct 2026 | CVSS 8.2 | Slican IPxWebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext. An attacker with access to the database can… |