Known Vulnerabilities for products from Sangoma
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Sangoma".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Additional devices specifications by Sangoma can be found at device.report : Sangoma
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-75600 json | FreePBX is an open source IP PBX. Prior to version 17.0.9, authenticated users who are authorized to access the GraphQL api m... | Not Provided | 2026-09-28 | 2026-10-16 |
| CVE-2026-73665 json | FreePBX is an open source IP PBX. Prior to 17.0.9, the UCP Node server on ports 8001 and 8003 uses io.use(checkAuth) in node/... | Not Provided | 2026-08-13 | 2026-10-09 |
| CVE-2026-73663 json | FreePBX is an open source IP PBX. From 16.0.0 until 16.0.11 and 17.0.4, the FreePBX missedcall module places the inbound Call... | Not Provided | 2026-08-13 | 2026-10-09 |
| CVE-2026-73662 json | FreePBX is an open source IP PBX. From 17.0.1 until 17.0.7, the FreePBX Music on Hold module permits dangerous command-line o... | Not Provided | 2026-08-13 | 2026-10-09 |
| CVE-2026-73661 json | FreePBX is an open source IP PBX. Prior to 16.0.47 and 17.0.30, the FreePBX Framework module permits a crafted backup to rest... | Not Provided | 2026-08-13 | 2026-10-09 |
| CVE-2026-54710 json | FreePBX is an open source IP PBX. Prior to versions 16.0.40 and 17.0.7, a critical remote code execution (RCE) vulnerability ... | Not Provided | 2026-09-28 | 2026-10-16 |
| CVE-2026-54708 json | FreePBX is an open source IP PBX. Prior to versions 16.0.72 and 17.0.7, a critical vulnerability exists in the FreePBX backup... | Not Provided | 2026-09-28 | 2026-10-16 |
| CVE-2026-54675 json | FreePBX is an open source IP PBX. Prior to versions 16.0.10 and 17.0.5, a critical vulnerability exists in the sound language... | Not Provided | 2026-09-28 | 2026-10-16 |
| CVE-2026-54674 json | FreePBX is an open source IP PBX. Prior to versions 16.0.39 and 17.0.7, users authenticated via User Control Panel (UCP) are ... | Not Provided | 2026-09-28 | 2026-10-16 |
| CVE-2026-46376 json | FreePBX is an open source IP PBX. From 15.0.42 to before 16.0.45 and 17.0.7, unauthenticated users may be able to access the ... | Not Provided | 2026-05-29 | 2026-07-21 |
| CVE-2026-45562 json | FreePBX is an open source IP PBX. Prior to versions 16.0.4 and 17.0.6, the FreePBX Music on Hold (MoH) module contains a crit... | Not Provided | 2026-09-28 | 2026-10-16 |
| CVE-2026-44239 json | FreePBX is an open source IP PBX. Prior to 16.0.22 and 17.0.5, the Dashboard module's getcontent AJAX handler includes PHP fi... | Not Provided | 2026-05-29 | 2026-07-21 |
| CVE-2026-44238 json | FreePBX is an open source IP PBX. Prior to 16.0.50 and 17.0.11, the CDR Reports module page allows SQL injection through the ... | Not Provided | 2026-05-29 | 2026-07-21 |
| CVE-2026-44237 json | FreePBX is an open source IP PBX. Prior to 17.0.8, the FreePBX api module's OAuth2 implementation does not sufficiently valid... | Not Provided | 2026-05-29 | 2026-07-21 |
| CVE-2026-9586 json | An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The /pa endpoint proces... | Not Provided | 2026-07-17 | 2026-09-03 |
| CVE-2025-67736 json | The FreePBX module tts (Text to Speech) for FreePBX, an open-source web-based graphical user interface (GUI) that manages Ast... | Not Provided | 2025-12-16 | 2026-10-07 |
| CVE-2025-67722 json | FreePBX is an open-source web-based graphical user interface (GUI) that manages Asterisk. Prior to versions 16.0.45 and 17.0.... | Not Provided | 2025-12-16 | 2026-10-07 |
| CVE-2025-66039 json | FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions are vulnerable to authenti... | Not Provided | 2025-12-09 | 2026-09-25 |
| CVE-2025-64328 json | FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. In versions 17.0.2.36 and above bef... | Not Provided | 2025-11-07 | 2026-06-17 |
| CVE-2025-59429 json | FreePBX is an open source GUI for managing Asterisk. In versions prior to 16.0.68.39 for FreePBX 16 and versions prior to 17.... | Not Provided | 2025-10-14 | 2026-10-08 |
Known software with vulnerabilities from Sangoma
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Sangoma | Asterisk | 16.10.0 |
| Application | Sangoma | Freepbx | 10.13.66 |
| Hardware | Sangoma | Session Border Controller | - |
| Operating System | Sangoma | Session Border Controller Firmware | 2.2.1-18-ga |
| Application | Sangoma | Superfecta | 13.0.1 |