Tag

#VoIP

2 articles tagged #VoIP.

Title card for CVE-2026-9586 showing an unauthenticated XML request to Sangoma Switchvox's /pa endpoint flowing through raw string concatenation into a SQL injection, ending in a reverse shell and RCE

Cybersecurity/Vulnerability Management·Sep 8, 2026·7 min read

CVE-2026-9586: Sangoma Switchvox SQLi to RCE, Patch Now

CVE-2026-9586 is an unauthenticated SQL injection in Sangoma Switchvox's /pa endpoint that leads to RCE. Active exploitation, KEV status, and the fix.

SecurityCybersecurityCVE

Read

CVE-2026-20230: Cisco Unified CM SSRF Chain That Leads to Root

P.02

Cybersecurity/Vulnerability Management·Jul 9, 2026·5 min read

CVE-2026-20230: Cisco Unified CM SSRF Chain That Leads to Root

An unauthenticated SSRF in Cisco Unified CM is being exploited to write files, plant a webshell, and reach root. The chain, and how to patch or work around.

SecurityCybersecurityCVE

Read