netVigilance Vulnerability intelligence since 2004

Sangoma

4 Sangoma vulnerabilities with confirmed exploitation in the wild, as published by CISA; 4 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for Sangoma
Vulnerability Status
overdue 5d2026-09-05 CVE-2026-9586 Sangoma / Switchvox Sangoma Switchvox SQL Injection Vulnerability 2026-09-02 9.3 past due
overdue 198d2026-02-24 CVE-2025-64328 Sangoma / FreePBX Sangoma FreePBX OS Command Injection Vulnerability 2026-02-03 8.6 past due
overdue 198d2026-02-24 CVE-2019-19006 Sangoma / FreePBX Sangoma FreePBX Improper Authentication Vulnerability 2026-02-03 9.8 past due
overdue 356d2025-09-19 CVE-2025-57819 Sangoma / FreePBX Sangoma FreePBX Authentication Bypass Vulnerability 2025-08-29 10.0 past due