Product
Sangoma Switchvox
- First Reported
- Sep 2, 2026
- Latest Reported
- Sep 6, 2026
Reported Context (5)
- active exploitation of flaws in products like Microsoft Exchange, SonicWall SMA 1000, PaperCut, and Sangoma Switchvox, and major data breaches affecting McKesson and Thomson Reuters. Week in Review: Infostealer Account Takeovers, Active Exploits and Major Data Breaches
- Threat actors have been exploiting a critical-severity vulnerability in the enterprise VoIP telephony management solution Sangoma Switchvox, Horizon3 and CISA warn. Sangoma Switchvox SQL Injection Exploited for Remote Code Execution
- CISA has added seven actively exploited vulnerabilities to its KEV catalog, affecting SonicWall SMA 1000, Sangoma Switchvox, JFrog Artifactory, Kludex Starlette, Kestra OSS, and Berri LiteLLM. CISA Adds Seven Actively Exploited Flaws Affecting Enterprise and AI Tools
- A threat actor is actively exploiting the recently patched CVE-2026-9586 SQL injection flaw in internet-exposed Sangoma Switchvox instances, dropping reverse shells and later staging additional malware. Attackers Exploit Sangoma Switchvox SQL Injection Flaw CVE-2026-9586
- Attackers are actively exploiting CVE-2026-9586, an unauthenticated SQL injection flaw in Sangoma Switchvox that can lead to remote code execution. Attackers Exploit Sangoma Switchvox SQL Injection Flaw for Remote Code Execution
CVE (9)
Malware (2)
People (10)
Threat Actors (3)
MITRE ATT&CK (8)
Vendors (13)
Products (16)
Tools (2)
Industries (1)
Countries (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.