Utopia Tech
Security1 min read

Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials

Threat actors are exploiting a severe security vulnerability in Sangoma Switchvox, an enterprise VoIP platform, that could allow unauthenticated remote code execution. The vulnerability in question is CVE-2026-9586 (CVSS score: 9.3), a critical unauthenticated SQL injection vulnerability in Sangoma Switchvox SMB Edition 8.3 (104997) that can allow attackers to remotely execute

UT

Utopia Tech

September 2, 2026 · 1 min read

Share

Threat actors are exploiting a severe security vulnerability in Sangoma Switchvox, an enterprise VoIP platform, that could allow unauthenticated remote code execution. The vulnerability in question is CVE-2026-9586 (CVSS score: 9.3), a critical unauthenticated SQL injection vulnerability in Sangoma Switchvox SMB Edition 8.3 (104997) that can allow attackers to remotely execute arbitrary code as

Originally published at thehackernews.com

#Cybersecurity#Malware#Vulnerabilities
Share
▸ Want a deeper look?

Talk to an architect about applying this to your stack.

60-minute technical evaluation, no obligation. We'll map the ideas in this article to your environment.

Schedule the call
▸ Continue reading

More from the journal

Extradited Russian Hacker Faces Charges Over Excel Malware Campaign That Infected Thousands
Security

Extradited Russian Hacker Faces Charges Over Excel Malware Campaign That Infected Thousands

1 min read

GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends
Security

GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends

1 min read

Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another
Security

Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another

1 min read

All posts
Skip to main content