How many Sangoma Switchvox SMB Edition CVEs are in CISA KEV?

None of Sangoma Switchvox SMB Edition's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Sangoma Switchvox SMB Edition are affected?

2 distinct Sangoma Switchvox SMB Edition versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Sangoma Switchvox SMB Edition CVEs?

Sangoma Switchvox SMB Edition's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-73 (External Control of File Name or Path), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')).

How many critical Sangoma Switchvox SMB Edition vulnerabilities are there?

Sangoma Switchvox SMB Edition has 1 critical and 3 high-severity CVEs.

What is the average severity of Sangoma Switchvox SMB Edition CVEs?

The average CVSS base score across Sangoma Switchvox SMB Edition's scored CVEs is 8.0.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

Sangoma

4 CVEs

Sangoma Switchvox SMB Edition Vulnerabilities

Name: Sangoma Switchvox SMB Edition vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Switchvox SMB Edition by Sangoma.

4

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

8.0

Avg CVSS

2026–2026

Last updated July 17, 2026

Overview

Sangoma Switchvox SMB Edition has 4 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 8.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Sangoma Switchvox SMB Edition, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Sangoma Switchvox SMB Edition's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High3

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Sangoma Switchvox SMB Edition's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No Sangoma Switchvox SMB Edition CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Sangoma Switchvox SMB Edition version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

8.3 (104997) <= v < 8.4.0.24 CVEs

Fixed in

8.4.0.24 CVEs

Find a version

4 CVEs

Sort

Authenticated Stored Cross-Site Scripting (XSS) in Switchvox SMB Web Portal
CVE-2026-9588
Patch
CWE-79
High · CVSS 7.0
EPSS 0.2% (15th pct)2026-07-17
Authenticated Local File Inclusion (LFI) in Switchvox SMB Web Portal
CVE-2026-9587
Patch
CWE-73
High · CVSS 7.1
EPSS 0.2% (14th pct)2026-07-17
Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMB
CVE-2026-9586
Patch
CWE-89
Critical · CVSS 9.3
EPSS 0.4% (34th pct)2026-07-17
Unauthenticated Reflected Cross-Site Scripting (XSS) in Switchvox SMB Web Portal
CVE-2026-9585
Patch
CWE-79
High · CVSS 8.6
EPSS 0.3% (25th pct)2026-07-17

Common weakness types

The CWE weakness categories most often found in Sangoma Switchvox SMB Edition CVEs. Follow any weakness for its full explanation.

Other Sangoma products

Browse vulnerabilities for other products by Sangoma.

freepbx42 CVEs asterisk28 CVEs certified asterisk15 CVEs freepbx linux 72 CVEs restapps2 CVEs session border controller2 CVEs session border controller firmware2 CVEs switchvox2 CVEs

All Sangoma vulnerabilities

Frequently asked questions

Common questions about Sangoma Switchvox SMB Edition vulnerabilities.

How many CVEs does Sangoma Switchvox SMB Edition have?: Sangoma Switchvox SMB Edition has 4 published CVE records since 2026.
How many Sangoma Switchvox SMB Edition CVEs are in CISA KEV?: None of Sangoma Switchvox SMB Edition's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Sangoma Switchvox SMB Edition vulnerabilities?: No Sangoma Switchvox SMB Edition CVEs currently have a tracked public exploit in this dataset.
Which versions of Sangoma Switchvox SMB Edition are affected?: 2 distinct Sangoma Switchvox SMB Edition versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Sangoma Switchvox SMB Edition CVEs?: Sangoma Switchvox SMB Edition's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-73 (External Control of File Name or Path), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')).
How many critical Sangoma Switchvox SMB Edition vulnerabilities are there?: Sangoma Switchvox SMB Edition has 1 critical and 3 high-severity CVEs.
What is the average severity of Sangoma Switchvox SMB Edition CVEs?: The average CVSS base score across Sangoma Switchvox SMB Edition's scored CVEs is 8.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Sangoma Switchvox SMB Edition vulnerabilities

Monitor new Sangoma Switchvox SMB Edition vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing