Documented CVEs
1 vulnerabilities cataloged in the Hermes intelligence repository.
| Parameter | Technical Specification |
|---|---|
| Official Name | Sangoma Switchvox PBX |
| Vendor / Project | sangoma |
| Canonical ID | sangoma:switchvox |
| Versioning Scheme | generic |
| CPE Identifiers | cpe:2.3:a:sangoma:switchvox:*:*:*:*:*:*:*:* |
| Overall Posture | CRITICAL |
| Recommended Safe Release | 8.4 |
Documented CVEs
1 vulnerabilities cataloged in the Hermes intelligence repository.
CISA KEV Entries
1 flaws with confirmed active in-the-wild exploitation.
Weaponized Exploits
1 vulnerabilities with publicly available PoCs or weaponized exploit tooling.
Remediation Target
Recommended upgrade to 8.4 to neutralize known flaws.
Progression of Hermes Threat Score (HTS) posture and maximum EPSS probability over the last 30 days:
0 / 100
= Stable over 30d
11.8 %
= Stable over 30d
1
Active in-the-wild exploitation
| CVE | CVSS Score | EPSS Probability | CISA KEV | Affected Versions | Fixed In | Hermes Analysis |
|---|---|---|---|---|---|---|
| CVE-2026-9586 | 9.8 (CRITICAL) | 11.8% | CISA KEV | β€ v8.3 | 8.4 | Analysis β |
Vulnerabilities impacting Sangoma Switchvox PBX are actively leveraged in real-world intrusion campaigns:
Are you operating Sangoma Switchvox PBX in your infrastructure? Inspect your running build to evaluate applicability, confidence score, and security deltas: