// tag

CVE-2026-9586

notes

CVE-2026-9586 — Sangoma Switchvox: Sangoma Switchvox SQL Injection Vulnerability

1. Executive summary Sangoma Switchvox — an enterprise VoIP/unified communications platform built on Asterisk — contains CVE-2026-9586, a critical unauthenticated SQL injection vulnerability (CVSS 9.

02 Sep 2026 · 6 min read read →

notes

Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials

1. Executive summary Attackers are reportedly exploiting CVE-2026-9586 in internet-facing Sangoma Switchvox SMB Edition 8.3 (104997), using unauthenticated SQL injection to obtain

02 Sep 2026 · 4 min read read →

page 1 of 1