Sangoma Switchvox SMB Edition
4 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-9588 | 8.3 (104997) – < 8.4.0.2 | Authenticated Stored Cross-Site Scripting (XSS) in Switchvox SMB Web Portal | HIGH 7.0 | 0.4 % | ||
| CVE-2026-9587 | 8.3 (104997) – < 8.4.0.2 | Authenticated Local File Inclusion (LFI) in Switchvox SMB Web Portal | HIGH 7.1 | 0.4 % | ||
| CVE-2026-9586 | 8.3 (104997) – < 8.4.0.2 | Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMB | CRITICAL 9.3 | 19 % | KEV | |
| CVE-2026-9585 | 8.3 (104997) – < 8.4.0.2 | Unauthenticated Reflected Cross-Site Scripting (XSS) in Switchvox SMB Web Portal | HIGH 8.6 | 0.6 % |