Login Request a demo
SA
Vendor
Sangoma
13 products with CVEs on record
113
CVEs
6
On KEV
0
New 30D
Products
FR
FreePBX
Sangoma
9.8
51 CVEs3 on KEV0 new
SS
Switchvox SMB Edition
Sangoma
9.8
4 CVEs1 on KEV0 new
SW
Switchvox
Sangoma
9.8
3 CVEs1 on KEV0 new
FI
Filestore
Sangoma
7.2
1 CVEs1 on KEV0 new
AS
Asterisk
Sangoma
9.8
28 CVEs0 on KEV0 new
CA
Certified Asterisk
Sangoma
8.8
15 CVEs0 on KEV0 new
FL
Freepbx Linux 7
Sangoma
8.6
2 CVEs0 on KEV0 new
RE
Restapps
Sangoma
9.8
2 CVEs0 on KEV0 new
SB
Session Border Controller Firmware
Sangoma
9.8
2 CVEs0 on KEV0 new
VO
Voicemail
Sangoma
6.1
2 CVEs0 on KEV0 new
IF
Img2020 Firmware
Sangoma
9.8
1 CVEs0 on KEV0 new
NS
Netborder/vega Session Firmware
Sangoma
9.8
1 CVEs0 on KEV0 new
WA
Wanpipe
Sangoma
–
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-75600
FR
Freepbx
Sangoma
8.8
1%
Sep 28FreePBX: Authenticated API generatedocs Host Command Injection
CVE-2026-54710
FR
Freepbx
Sangoma
8.8
1%
Sep 28FreePBX: Authenticated Superfecta Arbitrary PHP Code Execution (RCE via Unsafe File Inclusion)
CVE-2026-54708
FR
Freepbx
Sangoma
8.8
1%
Sep 28Authenticated Remote Code Execution via Path Traversal in FreePBX Backup Module
CVE-2026-54675
FR
Freepbx
Sangoma
8.8
1%
Sep 28FreePBX: Authenticated Remote Code Execution via File Upload and Convert in Soundlang Module
CVE-2026-54674
FR
Freepbx
Sangoma
8.8
1%
Sep 28Authenticated Command Injection in FreePBX UCP Interface
CVE-2026-45562
FR
Freepbx
Sangoma
7.2
0%
Sep 28FreePBX: Authenticated Remote Code Execution in FreePBX Music on Hold (MoH) Module
CVE-2026-73665
FR
Freepbx
Sangoma
9.8
0%
Aug 13FreePBX UCP: Unauthenticated remote code execution via socket.io namespace auth bypass and AMI action injection
CVE-2026-73663
FR
Freepbx
Sangoma
9.8
0%
Aug 13FreePBX: Unauthenticated SQL injection in FreePBX missedcall via inbound Caller ID name leads to administrator takeover
CVE-2026-73662
FR
Freepbx
Sangoma
7.2
1%
Aug 13Authenticated FreePBX Music RCE via mpg123 and Asterisk Call Files
CVE-2026-73661
FR
Freepbx
Sangoma
6.5
0%
Aug 13FreePBX: Authenticated Framework AUTHTYPE Can Be Restored From a Crafted Backup
CVE-2026-9588
SS
Switchvox SMB Edition
Sangoma
7.0
0%
Jul 17Authenticated Stored Cross-Site Scripting (XSS) in Switchvox SMB Web Portal
CVE-2026-9587
SS
Switchvox SMB Edition
Sangoma
7.1
0%
Jul 17Authenticated Local File Inclusion (LFI) in Switchvox SMB Web Portal
CVE-2026-9586
In wildKEV
SS
Switchvox SMB Edition
Sangoma
9.8
19%
Jul 17Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMB
CVE-2026-9585
SS
Switchvox SMB Edition
Sangoma
8.6
1%
Jul 17Unauthenticated Reflected Cross-Site Scripting (XSS) in Switchvox SMB Web Portal
CVE-2026-44237
FR
Freepbx
Sangoma
8.1
3%
May 29FreePBX: Authenticated Access can lead to Subsequent OAuth2 Authentication Bypass in API Module
CVE-2026-44238
FR
Freepbx
Sangoma
8.8
0%
May 29FreePBX: Authenticated SQL Injection via ORDER BY in CDR Reports
CVE-2026-44239
FR
Freepbx
Sangoma
8.8
0%
May 29FreePBX: Authenticated Local File Inclusion in Dashboard Module
CVE-2026-46376
FR
Freepbx
Sangoma
9.8
0%
May 29FreePBX: Unauthenticated Use of Hard-Coded Credentials Vulnerability in FreePBX UCP Interface
CVE-2026-45362
SW
Switchvox
Sangoma
3.2
0%
May 12Sangoma Switchvox before 8.4 places cleartext SIP authentication credentials in a backup file
CVE-2026-28287
FR
Freepbx
Sangoma
8.8
9%
Mar 5FreePBX: Authenticated Remote Code Execution via Recordings Module AJAX Endpoints
CVE-2026-28284
FR
Freepbx
Sangoma
8.8
0%
Mar 5FreePBX: Authenticated SQL Injection Vulnerabilities in FreePBX Logfiles Module
CVE-2026-28210
FR
Freepbx
Sangoma
8.8
0%
Mar 5FreePBX: Authenticated SQL Injection in CDR (Call Data Record) Reports
CVE-2026-28209
FR
Freepbx
Sangoma
7.2
1%
Mar 5FreePBX: Command Injection leading to Remote Code Execution in FreePBX ElevenLabs Text-to-Speech integration
CVE-2025-55210
FR
Freepbx
Sangoma
7.5
0%
Feb 12FreePBX API has a Privilege Escalation Error in GraphQL Allowing Authenticated Users to Access Additional Scopes
CVE-2026-23741
AS
Asterisk
Sangoma
8.8
0%
Feb 6ast_coredumper running as root sources ast_debug_tools.conf from /etc/asterisk; potentially leading to privilege escalation
CVE-2026-23740
CA
Certified Asterisk
Sangoma
7.8
0%
Feb 6Asterisk vulnerable to potential privilege escalation
CVE-2026-23739
AS
Asterisk
Sangoma
6.5
0%
Feb 6Asterisk xml.c uses unsafe XML_PARSE_NOENT leading to potential XXE Injection
CVE-2026-23738
AS
Asterisk
Sangoma
6.1
0%
Feb 6The Asterisk embedded web server 's /httpstatus page echos user supplied values(cookie and query string) without sanitization
CVE-2025-67736
FR
Freepbx
Sangoma
7.2
6%
Dec 16Authenticated SQL Injection in FreePBX tts (Text To Speech) module
CVE-2025-67722
FR
Freepbx
Sangoma
7.8
0%
Dec 16Authenticated amportal search for ‘freepbx_engine’ in non root writeable directories leads to potential privilege escalation
CVE-2024-58294
FR
Freepbx
Sangoma
8.8
4%
Dec 11FreePBX 16 Authenticated Remote Code Execution via API Module
CVE-2025-66039
FR
Freepbx
Sangoma
9.8
3%
Dec 9FreePBX Endpoint Manager Allows Unauthenticated Logins to Administrator Control Panel via Forged Basic Auth Header
CVE-2025-64328
In wildKEV
FI
Filestore
Sangoma
7.2
85%
Nov 7FreePBX Administration GUI is Vulnerable to Authenticated Command Injection
CVE-2025-59429
FR
Freepbx
Sangoma
5.4
0%
Oct 14FreePBX core module vulnerable to reflected cross-site scripting via Asterisk HTTP Status page
CVE-2025-1131
CA
Certified Asterisk
Sangoma
7.8
0%
Sep 23Asterisk Unsafe Shell Sourcing in safe_asterisk Leads to Local Privilege Escalation
CVE-2025-59056
FR
Freepbx
Sangoma
7.5
0%
Sep 15FreePBX vulnerable to unauthenticated Denial of Service
CVE-2025-55211
FR
Freepbx
Sangoma
8.8
0%
Sep 15FreePBX Post-Authenticated Command Injection
CVE-2025-57819
In wildKEV
FR
Freepbx
Sangoma
9.8
95%
Aug 28FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE
CVE-2025-57767
AS
Asterisk
Sangoma
7.5
0%
Aug 28Asterisk can crash from a specifically malformed Authorization header in an incoming SIP request
CVE-2025-54995
CA
Certified Asterisk
Sangoma
6.5
1%
Aug 28Asterisk remotely exploitable leak of RTP UDP ports and internal resources
CVE-2025-49832
CA
Certified Asterisk
Sangoma
6.5
0%
Aug 1Asterisk is Vulnerable to Remote DoS and possible RCE Attacks During Memory Allocation
CVE-2025-32105
IF
Img2020 Firmware
Sangoma
9.8
1%
Jun 3A buffer overflow in the the Sangoma IMG2020 HTTP server through 2.3.9.6 allows an unauthenticated user to achieve remote code execution
CVE-2025-47780
CA
Certified Asterisk
Sangoma
7.8
0%
May 22cli_permissions.conf: deny option does not work for disallowing shell commands
CVE-2025-47779
CA
Certified Asterisk
Sangoma
6.5
1%
May 22Using malformed From header can forge identity with ";" or NULL in name portion
CVE-2024-57520
AS
Asterisk
Sangoma
9.8
1%
Feb 5Insecure Permissions vulnerability in asterisk v22 allows a remote attacker to execute arbitrary code via the action_createconfig function
CVE-2024-53566
AS
Asterisk
Sangoma
5.5
0%
Dec 2An issue in the action_listcategories() function of Sangoma Asterisk v22/22.0.0/22.0.0-rc1/22.0.0-rc2/22.0.0-pre1 allows attackers to execute a path traversal
CVE-2024-53564
FR
FreePBX
Sangoma
7.2
0%
Dec 2A vulnerability was discovered in FreePBX 17.0.19.17
CVE-2024-42491
AS
Asterisk
Sangoma
5.7
1%
Sep 5A malformed Contact or Record-Route URI in an incoming SIP request can cause Asterisk to crash when res_resolver_unbound is used
CVE-2024-35190
AS
Asterisk
Sangoma
5.3
1%
May 17Asterisk' res_pjsip_endpoint_identifier_ip: wrongly matches ALL unauthorized SIP requests
CVE-2023-26566
FL
Freepbx Linux 7
Sangoma
8.6
1%
May 10Sangoma FreePBX 1805 through 2203 on Linux contains hardcoded credentials for the Asterisk REST Interface (ARI), which allows remote attackers to reconfigure Asterisk and make…
CVE-2023-49786
CA
Certified Asterisk
Sangoma
5.9
5%
Dec 14Asterisk is an open source private branch exchange and telephony toolkit
CVE-2023-49294
CA
Certified Asterisk
Sangoma
7.5
45%
Dec 14Asterisk is an open source private branch exchange and telephony toolkit
CVE-2023-37457
CA
Certified Asterisk
Sangoma
8.2
1%
Dec 14Asterisk is an open source private branch exchange and telephony toolkit
CVE-2023-43336
FR
Freepbx
Sangoma
8.8
1%
Nov 2Sangoma Technologies FreePBX before cdr 15.0.18, 16.0.40, 15.0.16, and 16.0.17 was discovered to contain an access control issue via a modified parameter value, e.g., changing…
CVE-2023-26567
FL
Freepbx Linux 7
Sangoma
8.1
1%
Apr 26Sangoma FreePBX 1805 through 2302 (when obtained as a ,.ISO file) places AMPDBUSER, AMPDBPASS, AMPMGRUSER, and AMPMGRPASS in the list of global variables
CVE-2019-25090
FR
Freepbx
Sangoma
6.1
1%
Dec 27A vulnerability was found in FreePBX arimanager up to 13.0.5.3 and classified as problematic
CVE-2021-4283
VO
Voicemail
Sangoma
5.4
1%
Dec 27A vulnerability was found in FreeBPX voicemail
CVE-2021-4282
VO
Voicemail
Sangoma
6.1
1%
Dec 27A vulnerability was found in FreePBX voicemail
CVE-2020-36630
FR
Freepbx
Sangoma
9.8
1%
Dec 25A vulnerability was found in FreePBX cdr 14.0
CVE-2022-42706
AS
Asterisk
Sangoma
4.9
1%
Dec 5An issue was discovered in Sangoma Asterisk through 16.28, 17 and 18 through 18.14, 19 through 19.6, and certified through 18.9-cert1