S
Vendor security profile4 actively exploited CVEs
sangoma
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs18
Critical6
CISA KEV4
Public exploit5
Patch rate%22
Avg. CVSS8.5
12-month vulnerability rate
0
3
0
2
0
0
4
0
1
4
0
0
CVE KEV
CVE severity distribution
18toplam CVE
Critical6 (33%)
High9 (50%)
Medium1 (6%)
Uncertain2 (11%)
Patch and exploitation view
%22
Verified patch
%22
CISA KEV
%28
Public exploit
4Patch available
0Partial
3Workaround
0Vendor: no patch
11Unknown
Latest vulnerabilities
9.3
CVE-2026-73665
FreePBX UCP: Unauthenticated remote code execution via socket.io namespace auth bypass and AMI action injection
F
Patch status unknownEPSS %0
9.3
CVE-2026-73663
FreePBX: Unauthenticated SQL injection in FreePBX missedcall via inbound Caller ID name leads to administrator takeover
F
Patch verifiedEPSS %0
7.6
CVE-2026-73662
Authenticated FreePBX Music RCE via mpg123 and Asterisk Call Files
F
Patch verifiedEPSS %1
8.6
CVE-2026-73661
FreePBX: Authenticated Framework AUTHTYPE Can Be Restored From a Crafted Backup
F
Patch verifiedEPSS %0
9.3
CVE-2026-9586 Actively exploited
Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMB
S
Patch status unknownEPSS %19
9.3
CVE-2026-46376
FreePBX: Unauthenticated Use of Hard-Coded Credentials Vulnerability in FreePBX UCP Interface
F
Patch status unknownEPSS %0
8.8
CVE-2026-44239
Vulnerability in Sangoma Freepbx
S
Patch status unknownEPSS %0
8.8
CVE-2026-44238
SQL injection in Sangoma Freepbx
S
Patch status unknownEPSS %1
8.1
CVE-2026-44237
Vulnerability in Sangoma Freepbx
S
Patch status unknownEPSS %0
-
CVE-2019-19006 Actively exploited
Sangoma FreePBX Improper Authentication Vulnerability
S
WorkaroundEPSS %56