Skip to content

CyberSIXT Search

Vendor

Sangoma

CVEs tracked · all time: 4
in CISA KEV · all time: 4
articles · since 11 Sep: 0
articles · all time: 10

No articles in the last 45 daysThe latest: SecurityOnline, Mon 7 Sep, 04:31 UTC.See the full timeline

Products: FreePBX, Switchvox, Switchvox SMB Edition

CVEs

4 CVEs

CVE-2026-9586Sangoma Switchvox SQL Injection VulnerabilityCVSS9.3CriticalExploited19%EPSS3articles

CVE-2025-57819Sangoma FreePBX Authentication Bypass VulnerabilityCVSS10.0CriticalExploited95%EPSS1article

CVE-2025-64328Sangoma FreePBX OS Command Injection VulnerabilityCVSS8.6HighExploited85%EPSS7articles

CVE-2019-19006Sangoma FreePBX Improper Authentication VulnerabilityCVSSUnratedExploited56%EPSS2articles

Coverage

10 articles, all timeFull timeline RSS feed

7 SepCISA KEV Missed Four Actively Exploited AI and WordPress FlawsSecurityOnline
4 SepHackers Exploit Sangoma Switchvox Flaw for Remote Code ExecutionSecurityWeek
1 SepCVE-2026-9586: Switchvox RCE Exploited in the WildSecurityOnline
27 MayFreePBX Attackers Deploy JOMANGY Malware for Toll Fraud via CVEsSecurityOnline
1 MarFreePBX CVE-2025-64328 enables postauth commands EncystPHP shellsSecurity Affairs
27 FebCVE-2025-64328 fuels 900 FreePBX infections via EncystPHPThe Hacker News
27 Feb900 FreePBX servers hit after CVE-2025-64328 postauth shellSecurityWeek
4 FebFresh SolarWinds Vulnerability Exploited in AttacksSecurityWeek
3 FebU.S. CISA adds SolarWinds Web Help Desk, Sangoma FreePBX, and GitLab flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs
2 FebSilent Intruder: “EncystPHP” Web Shell Burrows into FreePBX SystemsSecurityOnline · first in our coverage