{"uuid": "d0c0773f-47c5-42fd-865e-840640479164", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9586", "type": "exploited", "source": "https://t.me/pphm_HackerNews/3013", "content": "\ud83d\udd34 Sangoma Switchvox Vulnerabilities Exploited in the Wild\n\nThreat actors have been exploiting a critical-severity vulnerability in the enterprise VoIP telephony management solution Sangoma Switchvox, Horizon3 and CISA warn.\n\nTracked as CVE-2026-9586 (CVSS score of 9.3) and described as an unauthenticated SQL injection issue, the security defect can be exploited remotely for arbitrary code execution.\n\nIt resides in an endpoint that processes XML content, which did not perform sanitization or parameterization when concatenating the user-controlled PhoneIP value into PostgreSQL queries.", "creation_timestamp": "2026-09-05T01:00:08.782384Z"}