MSRXSangoma vulnerabilities being exploited
3 Sangoma flaws were confirmed exploited in the wild in the past 365 days, across 2 products: FreePBX, Switchvox. If you run any of them, patch these first.
| Added | Exploited vulnerability | Fix by |
|---|---|---|
| 2026-09-02 | CVE-2026-9586 Switchvox Sangoma Switchvox SQL Injection Vulnerability Sangoma Switchvox contains a SQL injection vulnerability which allows an unauthenticated remote attacker to execute arbitrary SQL statements against the backend PostgreSQL database using a single crafted request, including database operations and remote code execution. | 2026-09-05 |
| 2026-02-03 | CVE-2025-64328 FreePBX Sangoma FreePBX OS Command Injection Vulnerability Sangoma FreePBX Endpoint Manager contains an OS command injection vulnerability that could allow for a post-authentication command injection by an authenticated known user via the testconnection -> check_ssh_connect() function. An attacker can leverage this vulnerability to potentially obtain remote access to the system as an asterisk user. | 2026-02-24 |
| 2026-02-03 | CVE-2019-19006 FreePBX Sangoma FreePBX Improper Authentication Vulnerability Sangoma FreePBX contains an improper authentication vulnerability that potentially allows unauthorized users to bypass password authentication and access services provided by the FreePBX admin. | 2026-02-24 |
Source: CISA Known Exploited Vulnerabilities catalog 2026.10.29 (live). A listing means some versions are affected: check yours in the advisory. Guidance only.