CVE Tools
Track your stack

Sangoma Switchvox Vulnerabilities Exploited in the Wild

SecurityWeekBy Ionut Arghire

Reported exploitedSangoma SwitchvoxJFrog Artifactory

Our summary

Horizon3 has confirmed active exploitation of CVE-2026-9586, a critical-severity vulnerability in Sangoma Switchvox with a CVSS score of 9.3. This unauthenticated SQL injection flaw allows attackers to achieve remote code execution against the backend PostgreSQL database by sending crafted requests. In response to the ongoing attacks, CISA added this vulnerability to its Known Exploited Vulnerabilities catalog alongside five other issues affecting products such as JFrog Artifactory, SonicWall SMA1000, Starlette, Kestra, and LiteLLM. Federal agencies are directed to remediate the Switchvox flaw within three days, while patches for the associated Kestra and Starlette vulnerabilities must be applied within two weeks.

Read at SecurityWeek

SecurityWeek publishes this story on its own site; we link to it rather than reprint it.

  1. The Hacker NewsCISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto MinersCVE-2026-42271, CVE-2026-48710 +3
  2. The Hacker NewsNearly 1 in 10 Exposed LiteLLM Gateways Accepted the Example "sk-1234" Admin KeyCVE-2026-42271, CVE-2026-48710 +1
  3. The Hacker NewsLiteLLM Flaw CVE-2026-42271 Exploited in the Wild, Chains to Unauthenticated RCECVE-2026-42271, CVE-2026-48710
  4. The Hacker NewsCritical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without CredentialsCVE-2026-42271
  5. The Hacker News⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and MoreCVE-2026-9586
  6. Help Net SecurityWeek in review: Claude accounts compromised through infostealer, Patch Tuesday forecastCVE-2026-9586
  7. BleepingComputerHackers exploit Sangoma Switchvox flaw to deploy reverse shellsCVE-2026-9586
  8. Help Net SecurityExploitation of Sangoma Switchvox flaw is underway (CVE-2026-9586)CVE-2026-9586
  9. The Hacker NewsAttackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without CredentialsCVE-2026-9586
  10. The Hacker NewsLiteLLM Vulnerability Chain Lets Low-Privilege Users Take Over AI Gateway ServersCVE-2026-42271

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store