Sangoma

Vulnerability activity for Sangoma: what is being exploited, what was published lately, and when the next patch release is due.

All vendors Open in the dashboard

Last 30 days

CVEs: 0
Critical (CVSS 9+): 0
Exploited (CISA KEV): 0
With exploit code: 0

Last 90 days

CVEs: 1
Critical (CVSS 9+): 1
Exploited (CISA KEV): 1
With exploit code: 1

Last 365 days

CVEs: 4
Critical (CVSS 9+): 2
Exploited (CISA KEV): 3
With exploit code: 2

Exploited now

CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.

9.3CriticalSep 2, 2026Sangoma Switchvox SQL injectionCVE-2026-9586Sangoma Switchvox contains a SQL injection vulnerability which allows an unauthenticated remote attacker to execute arbitrary SQL statements against the backend PostgreSQL database using a single crafted request, including database operations and remote code execution.Added to KEV Sep 2, 2026Exploited19% likelyExploit codeNucleiDetection
9.8CriticalFeb 3, 2026Sangoma FreePBX Auth bypass / access controlCVE-2019-19006Sangoma FreePBX contains an improper authentication vulnerability that potentially allows unauthorized users to bypass password authentication and access services provided by the FreePBX admin.Added to KEV Feb 3, 2026Exploited56% likely
8.6HighFeb 3, 2026Sangoma FreePBX Code / command injectionCVE-2025-64328Sangoma FreePBX Endpoint Manager contains an OS command injection vulnerability that could allow for a post-authentication command injection by an authenticated known user via the testconnection -> check_ssh_connect() function. An attacker can leverage this vulnerability to potentially obtain remote access to the system as an asterisk user. Added to KEV Feb 3, 2026Exploited85% likelyExploit codeMetasploit · NucleiDetection
10.0CriticalAug 28, 2025Sangoma FreePBX SQL injectionCVE-2025-57819Sangoma FreePBX contains an authentication bypass vulnerability due to insufficiently sanitized user-supplied data allows unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution.Added to KEV Aug 29, 2025 · same day as publicationExploited95% likelyExploit codeExploit-DB · Metasploit · NucleiDetection

Recent

9.3CriticalSep 2, 2026Sangoma Switchvox SQL injectionCVE-2026-9586Sangoma Switchvox contains a SQL injection vulnerability which allows an unauthenticated remote attacker to execute arbitrary SQL statements against the backend PostgreSQL database using a single crafted request, including database operations and remote code execution.Exploited19% likelyExploit codeNucleiDetection
8.6HighFeb 3, 2026Sangoma FreePBX Code / command injectionCVE-2025-64328Sangoma FreePBX Endpoint Manager contains an OS command injection vulnerability that could allow for a post-authentication command injection by an authenticated known user via the testconnection -> check_ssh_connect() function. An attacker can leverage this vulnerability to potentially obtain remote access to the system as an asterisk user. Exploited85% likelyExploit codeMetasploit · NucleiDetection
9.8CriticalFeb 3, 2026Sangoma FreePBX Auth bypass / access controlCVE-2019-19006Sangoma FreePBX contains an improper authentication vulnerability that potentially allows unauthorized users to bypass password authentication and access services provided by the FreePBX admin.Exploited56% likely
8.8HighDec 11, 2025Sangoma freepbx Code / command injectionCVE-2024-58294FreePBX 16 contains an authenticated remote code execution vulnerability in the API module that allows attackers with valid session credentials to execute arbitrary commands. Attackers can exploit the 'generatedocs' endpoint by crafting malicious POST requests with bash command injection to establish remote shell access.3.6% likely
10.0CriticalAug 28, 2025Sangoma FreePBX SQL injectionCVE-2025-57819Sangoma FreePBX contains an authentication bypass vulnerability due to insufficiently sanitized user-supplied data allows unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution.Exploited95% likelyExploit codeExploit-DB · Metasploit · NucleiDetection

See every Sangoma entry on the dashboard.