Skip to content

Sangoma Switchvox PBX β€” Security Intelligence & Vulnerability Profile


ParameterTechnical Specification
Official NameSangoma Switchvox PBX
Vendor / Projectsangoma
Canonical IDsangoma:switchvox
Versioning Schemegeneric
CPE Identifierscpe:2.3:a:sangoma:switchvox:*:*:*:*:*:*:*:*
Overall PostureCRITICAL
Recommended Safe Release8.4

Documented CVEs

1 vulnerabilities cataloged in the Hermes intelligence repository.

CISA KEV Entries

1 flaws with confirmed active in-the-wild exploitation.

Weaponized Exploits

1 vulnerabilities with publicly available PoCs or weaponized exploit tooling.

Remediation Target

Recommended upgrade to 8.4 to neutralize known flaws.


Progression of Hermes Threat Score (HTS) posture and maximum EPSS probability over the last 30 days:

Current HTS Score

0 / 100

= Stable over 30d

Max EPSS (Exploitation)

11.8 %

= Stable over 30d

CISA KEV Activity

1

Active in-the-wild exploitation

HTS Trend Curve (D-30 β†’ Today)2026-08-12 β†’ 2026-09-10
2026-09-02: KEV: CVE-2026-9586

3. Vulnerability History & Version Applicability Matrix

Section titled β€œ3. Vulnerability History & Version Applicability Matrix”
CVECVSS ScoreEPSS ProbabilityCISA KEVAffected VersionsFixed InHermes Analysis
CVE-2026-95869.8 (CRITICAL)11.8%CISA KEV≀ v8.38.4Analysis β†’

Vulnerabilities impacting Sangoma Switchvox PBX are actively leveraged in real-world intrusion campaigns:


Are you operating Sangoma Switchvox PBX in your infrastructure? Inspect your running build to evaluate applicability, confidence score, and security deltas: