Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentialshttps://thehackernews.com/2026/09/attackers-exploit-critical-switchvox.html
Threat actors are exploiting a severe security vulnerability in Sangoma Switchvox, an enterprise VoIP platform, that could allow unauthenticated remote code execution. The vulnerability in question is CVE-2026-9586 (CVSS score: 9.3), a critical unauthenticated SQL injection vulnerability in Sangoma Switchvox SMB Edition 8.3 (104997) that can allow attackers to remotely execute arbitrary code as