CVE-2021-45310

CVE-2021-45310 affects Sangoma Switchvox version 102409 and is an information-disclosure vulnerability caused by improper access restriction. An unauthenticated HTTP GET to https://Switchvox-IP/main?cmd=invalid_browser (and related invalid_browse URL) can exfiltrate user data such as first/last n...

CVE-2026-9586

Sangoma Switchvox SMB Edition 8.3 (104997) is vulnerable to an unauthenticated SQL injection in the /pa endpoint. The endpoint processes XML content beginning with and directly concatenates the user-controlled PhoneIP value into PostgreSQL queries without sanitization or parameterization. A sing...