en
Switchvox SMB Edition is a Sangoma business communications application that provides an IP PBX and unified communications platform for small and medium-sized organizations. It delivers voice calling, voicemail, messaging, call handling, conferencing, mobile access, and business integrations. The product is commonly deployed on managed on-premises infrastructure, with related cloud and virtualized delivery options in the Switchvox family.
As of 10/01/2026, within CyStack's analyzed data, Switchvox SMB Edition has 4 security vulnerabilities published in the last 90 days. Of these, 4 are rated High or Critical. Notably, 1 of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Switchvox SMB Edition and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScanSeverity across 4 analyzed records
| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-9588Authenticated Stored Cross-Site Scripting (XSS) in Switchvox SMB Web Portal | Exploitation statusNot known exploited | FixYes | Published07/17/2026 | SeverityHigh |
CVE-2026-9587Authenticated Local File Inclusion (LFI) in Switchvox SMB Web Portal | Exploitation statusNot known exploited | FixYes | Published07/17/2026 | SeverityHigh |
CVE-2026-9586Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMB | Exploitation statusKEV | FixYes | Published07/17/2026 | SeverityCritical |
CVE-2026-9585Unauthenticated Reflected Cross-Site Scripting (XSS) in Switchvox SMB Web Portal | Exploitation statusNot known exploited | FixYes | Published07/17/2026 | SeverityHigh |
