Security Digest
Sangoma: known exploited vulnerabilities
4 Sangoma CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2026-09-02 | CVE-2026-9586 | Sangoma Switchvox Sangoma Switchvox SQL Injection Vulnerability | 2026-09-05 |
| 2026-02-03 | CVE-2025-64328 | Sangoma FreePBX Sangoma FreePBX OS Command Injection Vulnerability | 2026-02-24 |
| 2026-02-03 | CVE-2019-19006 | Sangoma FreePBX Sangoma FreePBX Improper Authentication Vulnerability | 2026-02-24 |
| 2025-08-29 | CVE-2025-57819 | Sangoma FreePBX Sangoma FreePBX Authentication Bypass Vulnerability | 2025-09-19 |