Sangoma: exploited vulnerabilities
- 4exploited vulnerabilities
- 0used by ransomware
- Sep 2, 2026latest one added
- FreePBX 2
- Switchvox 1
- FreePBX 1
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Sep 2, 2026 | SQL Injection | Switchvox | Critical 9.3 | 19% |
| Feb 3, 2026 | FreePBX OS Command Injection | FreePBX | High 8.6 | 85% |
| Feb 3, 2026 | Sangoma FreePBX Improper Authentication | FreePBX | Critical 9.8 | 56% |
| Aug 29, 2025 | Authentication Bypass | FreePBX | Critical 10.0 | 95% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.