Sangoma Switchvox Flaw Hit in Active RCE Exploitation

Sangoma Switchvox flaw hit in active RCE exploitation

Attackers are exploiting CVE-2026-9586, an unauthenticated SQL injection in Sangoma Switchvox that enables remote code execution via the /pa endpoint. Horizon3 observed rapid attacks from 176.65.148.184 on...

Hackers Actively Exploiting Sangoma Switchvox VoIP Platform RCE Flaw in Attacks

A critical vulnerability in Sangoma Switchvox is being actively exploited, affecting the enterprise VoIP platform used to manage business phone systems, voicemail, call forwarding, monitoring, and analytics. The flaw, tracked as CVE-2026-9586, enables unauthenticated attackers to execute commands remotely on vulnerable systems without needing valid credentials. Horizon3.ai researchers observed valid exploitation attempts against internet-exposed…

Sangoma Switchvox RCE Flaw Actively Exploited in Wild via Unauthenticated SQL Injection

Security researchers have reported active exploitation attempts targeting a critical vulnerability in Sangoma Switchvox, allowing unauthenticated… Read more →