Skip to content
THREATWIRE

CVE Tracker · Vendor

Sangoma CVEs

10 CVEs in the tracker, 4 in the CISA KEV catalogue.

All vendors · RSS feed for Sangoma · Tracker data last updated 18 Oct 2026.

Showing 10 of 10

  1. CVE-2026-75600CVSS 8.8 highEPSS 0.81%2026-09-28

    freepbx. FreePBX is an open source IP PBX. Prior to version 17.0.9, authenticated users who are authorized to access t…

  2. CVE-2026-54710CVSS 8.8 highEPSS 0.51%2026-09-28

    freepbx. FreePBX is an open source IP PBX. Prior to versions 16.0.40 and 17.0.7, a critical remote code execution (RCE…

  3. CVE-2026-54708CVSS 8.8 highEPSS 0.53%2026-09-28

    freepbx. FreePBX is an open source IP PBX. Prior to versions 16.0.72 and 17.0.7, a critical vulnerability exists in th…

  4. CVE-2026-54675CVSS 8.8 highEPSS 0.66%2026-09-28

    freepbx. FreePBX is an open source IP PBX. Prior to versions 16.0.10 and 17.0.5, a critical vulnerability exists in th…

  5. CVE-2026-54674CVSS 8.8 highEPSS 0.88%2026-09-28

    freepbx. FreePBX is an open source IP PBX. Prior to versions 16.0.39 and 17.0.7, users authenticated via User Control…

  6. CVE-2026-45562CVSS 7.2 highEPSS 0.36%2026-09-28

    freepbx. FreePBX is an open source IP PBX. Prior to versions 16.0.4 and 17.0.6, the FreePBX Music on Hold (MoH) module…

  7. CVE-2026-9586CVSS 9.8 criticalEPSS 19.0%KEV2026-07-17

    Switchvox. Sangoma Switchvox SQL Injection Vulnerability

  8. CVE-2025-64328No CVSSEPSS 84.6%KEV

    FreePBX . Sangoma FreePBX OS Command Injection Vulnerability

  9. CVE-2025-57819No CVSSEPSS 86.3%KEV

    FreePBX. Sangoma FreePBX Authentication Bypass Vulnerability

  10. CVE-2019-19006No CVSSEPSS 55.9%KEV

    FreePBX. Sangoma FreePBX Improper Authentication Vulnerability