Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-09-02 07:08 UTC
Importiert: 2026-09-08 12:26 UTC
CVSS: 9.3
Quelle-ID: thn_global
uid_hash: d1246b0f65f46012cdb3ec8531dfa9cb238effce6de40e6a68c493f24326fdea

The Hacker News

Inhalt

Threat actors are exploiting a severe security vulnerability in Sangoma Switchvox, an enterprise VoIP platform, that could allow unauthenticated remote code execution.

The vulnerability in question is CVE-2026-9586 (CVSS score: 9.3), a critical unauthenticated SQL injection vulnerability in Sangoma Switchvox SMB Edition 8.3 (104997) that can allow attackers to remotely execute arbitrary code as

Verknuepfte CVEs

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2026-9586	CRITICAL	9.3	CRITICAL	9.3			2026-07-17

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
The Hacker News	thn_global	security_news		-	de	https://feeds.feedburner.com/TheHackersNews

Zurueck zur Eintrags-Liste