Sangoma
4 Sangoma flaws are on CISA's list of vulnerabilities attackers have used, 3 of them added in 2026. The latest was added Sep 2, 2026.
4on CISA's list, all time
3added in 2026
1in the last 90 days
0used by ransomware
1zero-days, all time
Exploited flaws added each year
Most-hit products
| Product | Exploited flaws | Most recent |
|---|---|---|
| FreePBX | 2 | Feb 3, 2026 |
| Switchvox | 1 | Sep 2, 2026 |
| FreePBX | 1 | Feb 3, 2026 |
Latest Sangoma flaws
- SwitchvoxSangoma Switchvox SQL Injection Vulnerability
- FreePBX Sangoma FreePBX Improper Authentication Vulnerability
- FreePBX Sangoma FreePBX OS Command Injection Vulnerability
- FreePBXSangoma FreePBX Authentication Bypass Vulnerability
Counts come from CISA's Known Exploited Vulnerabilities catalog, which lists flaws with reliable evidence of real attacks. A higher count often reflects how widely a vendor's products are used and targeted, not only how secure they are.