Known Exploited Vulnerabilities September 02, 2026 · CISA KEV Catalog

CVE-2026-9586: Sangoma Switchvox SQL Injection Vulnerability

Sangoma Switchvox contains a SQL injection vulnerability which allows an unauthenticated remote attacker to execute arbitrary SQL statements against the backend PostgreSQL database using a single crafted request, including database operations and remote code execution.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-9586 Sangoma
Related: CVE-2019-19006: Sangoma FreePBX Improper Authentication Vulnerability Known Exploited Vulnerabilities · Feb 03, 2026
CVE-2025-64328: Sangoma FreePBX OS Command Injection Vulnerability Known Exploited Vulnerabilities · Feb 03, 2026
CVE-2025-57819: Sangoma FreePBX Authentication Bypass Vulnerability Known Exploited Vulnerabilities · Aug 29, 2025