Hackers exploit Sangoma Switchvox flaw to deploy reverse shells

Attackers are actively exploiting CVE-2026-9586, an unauthenticated SQL injection vulnerability in the Sangoma Switchvox VoIP platform that can lead to remote code execution.

Read at the source

Summary written for cymesh.dev. The full article lives at BleepingComputer.

Referenced CVEs

CVE-2026-9586

Topics

rce cve

~/cymesh.net

This is what cymesh.net is for

Certificate and hostname problems are the ones you find out about from your users. cymesh.net finds them first.

monitorsTLS/SSL expiry, chain and hostnamealertsemail, ahead of the expiry datescopenon-intrusive, read-only checks

Open the console See cymesh.net

~/related/hackers-exploit-sangoma-switchvox-flaw-to-deploy-reverse-shells-1xnq0d

2026-10-02 05:49 UTC[crit]

Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes

The Hacker NewsCVE-2026-104286zero-day cve cisa

2026-10-01 22:42 UTC[crit]

Fortinet warns of critical FortiMail flaw exploited in zero-day attacks

BleepingComputerCVE-2026-104286zero-day cve

2026-10-01 16:45 UTC[crit]

ThreatsDay: AI-Powered Zero-Day Chain, 543K Live Secrets, Model Inspection RCE and 13 More Stories

The Hacker Newszero-day rce ai

2026-10-01 12:55 UTC[crit]

Zimbra Vulnerability Exploited in the Wild Prior to Public Disclosure

SecurityWeekCVE-2026-73570cve

2026-10-01 12:00 UTC[med]

Johnson Controls EasyIO Neo Series EC and CW Controllers

CISA AdvisoriesCVE-2026-64893cve