⤷ Title: Switchvox CVE-2026-9586: Unauthenticated SQL Injection Leads to RCE, Exploited in the Wild
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Fri, 04 Sep 2026 14:15:33 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_9586 #Horizon3 #PostgreSQL #remote code execution #Sangoma #SQL injection #Switchvox #VoIP security
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Fri, 04 Sep 2026 14:15:33 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2026_9586 #Horizon3 #PostgreSQL #remote code execution #Sangoma #SQL injection #Switchvox #VoIP security
Information Security News
Switchvox CVE-2026-9586: Unauthenticated SQL Injection Leads to RCE, Exploited in the Wild
For the enterprise telephone exchange Sangoma Switchvox, accepting a single specially crafted XML request suffices for a stranger on the internet to reach the server’s command shell. This cr…