Advisories · Technology

Sangoma Switchvox SMB Edition.

Every CVE that names Sangoma Switchvox SMB Edition among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-9588 CVE record

CVSS 7.0 High

Authenticated Stored Cross-Site Scripting (XSS) in Switchvox SMB Web Portal
- Sangoma Switchvox SMB Edition
- Cross-site scripting (XSS)
Not analysed yet 17 Jul 2026
CVE-2026-9587 CVE record

CVSS 7.1 High

Authenticated Local File Inclusion (LFI) in Switchvox SMB Web Portal
- Sangoma Switchvox SMB Edition
- Path traversal
Not analysed yet 17 Jul 2026
CVE-2026-9586 CVE record

CVSS 9.3 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMB
- Sangoma Switchvox SMB Edition
- SQL injection
Not analysed yet 17 Jul 2026
CVE-2026-9585 CVE record

CVSS 8.6 High

Unauthenticated Reflected Cross-Site Scripting (XSS) in Switchvox SMB Web Portal
- Sangoma Switchvox SMB Edition
- Cross-site scripting (XSS)
Not analysed yet 17 Jul 2026