Critical Switchvox Flaw CVE-2026-9586: Attackers Hijack VoIP Systems via SQL Injection
Sangoma’s Switchvox VoIP phone system has been under active attack since late August: the unpatched flaw CVE-2026-9586 (CVSS 9.3) lets attackers fully take over the server without authentication. A patch has been available since July.








