Sangoma Switchvox Under Attack: A 9.3-Severity Hole in Your Phone System
Your phone system is now a remote-code-execution target, and attackers already know it A critical flaw in Sangoma Switchvox, the management software behind a lot of enterprise VoIP deployments, is under active exploitation. CVE-2026-9586 carries a CVSS score of 9.3. It is an unauthenticated SQL injection, so the attacker does not need credentials or a…