---
title: "Sangoma: known exploited vulnerabilities"
url: https://erroneo.us/security/vendor/sangoma/
description: "Every Sangoma vulnerability in CISA's Known Exploited Vulnerabilities catalog since October 2023 (4), newest first, with due dates and fixes."
type: vendor
section: "Security Digest"
date_modified: 2026-09-02
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Sangoma: known exploited vulnerabilities

- 2026-09-02 [CVE-2026-9586](https://erroneo.us/security/cve/CVE-2026-9586/index.md) Sangoma Switchvox: Sangoma Switchvox SQL Injection Vulnerability (due 2026-09-05; ransomware: Unknown)
- 2026-02-03 [CVE-2025-64328](https://erroneo.us/security/cve/CVE-2025-64328/index.md) Sangoma FreePBX : Sangoma FreePBX OS Command Injection Vulnerability (due 2026-02-24; ransomware: Unknown)
- 2026-02-03 [CVE-2019-19006](https://erroneo.us/security/cve/CVE-2019-19006/index.md) Sangoma FreePBX:  Sangoma FreePBX Improper Authentication Vulnerability (due 2026-02-24; ransomware: Unknown)
- 2025-08-29 [CVE-2025-57819](https://erroneo.us/security/cve/CVE-2025-57819/index.md) Sangoma FreePBX: Sangoma FreePBX Authentication Bypass Vulnerability (due 2025-09-19; ransomware: Unknown)

---
Source page: https://erroneo.us/security/vendor/sangoma/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt