Switchvox CVE-2026-9586: Unauthenticated SQL Injection Leads to RCE, Exploited in the Wild
For the enterprise telephone exchange Sangoma Switchvox, accepting a single specially crafted XML request suffices for a stranger on the internet to reach the server’s command shell. This critical vulnerability is already being probed...