Hackers exploit Sangoma Switchvox flaw to deploy reverse shells

Attackers are actively exploiting CVE-2026-9586, an unauthenticated SQL injection vulnerability in the Sangoma Switchvox VoIP platform that can lead to remote code execution.
SC Media

Critical SQL injection vulnerability in Sangoma Switchvox exploited in the wild

The vulnerability, a severe SQL injection flaw with a CVSS score of 9.3, affects Sangoma Switchvox SMB Edition 8.3 (104997).

This Sneaky ‘Jedi Mind Trick’ Hack Can Hijack a Business’s AI Chatbot and Cost It Millions

And, as with other AI-powered threats, prompt injection attacks are accessible to people without special skills. “I don’t ...