Skip to content
Exploit Radar Choose my productsProducts My radar

Products › Brands

Brand

Sangoma: actively exploited vulnerabilities

4 vulnerabilities in Sangoma products (FreePBX, Switchvox) are in CISA’s catalog of exploited vulnerabilities, 1 of them added in the last 90 days. Last added: September 2, 2026.

Sangoma security advisories

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

By category

Add just one Sangoma category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

Follow a single Sangoma product (FreePBX, Switchvox…) rather than the whole brand.

  • FreePBX3 vulnerabilities, Collaboration and video
  • Switchvox1 vulnerability, Collaboration and video

Name used by CISA: Sangoma. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Sangoma list.

  1. Rank 1

    Sangoma SwitchvoxCVE-2026-9586

    Sangoma Switchvox SQL Injection Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Sep 2, 2026

  2. Rank 2

    Sangoma FreePBXCVE-2019-19006

    Sangoma FreePBX Improper Authentication Vulnerability

    CVE from 2019, added in 2026

    CVSS severity 9.8critical

    Added Feb 3, 2026

  3. Rank 3

    Sangoma FreePBXCVE-2025-64328

    Sangoma FreePBX OS Command Injection Vulnerability

    CVSS severity 7.2high

    Added Feb 3, 2026

  4. Rank 4

    Sangoma FreePBXCVE-2025-57819

    Sangoma FreePBX Authentication Bypass Vulnerability

    CVSS severity 9.8critical

    Added Aug 29, 2025

Follow and verify

Indicative classification, based on the vendor and product names given by CISA. How products are classified.