<![CDATA[🔴 Critical: Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials]]>

<![CDATA[🔴 Critical: Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials]]>Threat actors are actively exploiting a critical vulnerability in Sangoma Switchvox, an enterprise VoIP platform, to achieve unauthenticated remote code execution. The flaw, tracked as CVE-2026-9586 with a CVSS score of 9.3, is a critical unauthenticated SQL injection issue present in Switchvox SMB Edition 8.3 (104997).

Successful exploitation allows attackers to execute arbitrary code without needing valid credentials. In observed campaigns, adversaries are leveraging this flaw to deploy reverse shells, establishing persistent remote access to affected systems.

Affected product: Sangoma Switchvox SMB Edition 8.3 (104997)
Vulnerability type: Unauthenticated SQL injection leading to remote code execution
Observed impact: Deployment of reverse shells on compromised hosts

Organizations running this specific build should consider this a high-priority exposure, especially if the management interface is reachable from untrusted networks. Since exploitation does not require authentication, exposure to the internet significantly elevates risk.

Source: The Hacker News

Given the unauthenticated nature of this flaw, how is your team validating that your Switchvox instances are either patched or isolated from external access?

]]>https://xploitlk.com/topic/194/critical-attackers-exploit-critical-switchvox-flaw-to-deploy-reverse-shells-without-credentialsRSS for NodeSat, 05 Sep 2026 12:37:44 GMTWed, 02 Sep 2026 22:30:21 GMT60