#sangoma — Public Fediverse posts

Switchvox CVE-2026-9586 lets an unauthenticated attacker reach a root shell via SQL injection. Active exploitation seen; patch to 8.4.0.2.

#Switchvox #CVE20269586 #RCE #SQLInjection #Sangoma #VoIP #InfoSec

https://meterpreter.org/switchvox-cve-2026-9586-rce/?utm_source=mastodon&utm_medium=jetpack_social

Hackers exploit #Sangoma #Switchvox flaw to deploy reverse shells

https://www.bleepingcomputer.com/news/security/hackers-exploit-sangoma-switchvox-flaw-to-deploy-reverse-shells/

#cybersecurity #VoIP

Hackers exploit Sangoma Switchvox flaw to deploy reverse shells

Hackers are actively exploiting a vulnerability in Sangoma Switchvox, CVE-2026-9586, to gain unauthorized access and deploy reverse shells on vulnerable devices, with around 4,000 exposed devices, mostly in the US, at risk. This security flaw allows attackers to inject malicious SQL code, making it crucial to update to Switchvox…

https://osintsights.com/hackers-exploit-sangoma-switchvox-flaw-to-deploy-reverse-shells?utm_source=mastodon&utm_medium=social

#Cve20269586 #Sangoma #Switchvox #SqlInjection #UnauthenticatedVulnerability

CVE Alert: CVE-2026-9586 - Sangoma - Switchvox SMB Edition - https://www.redpacketsecurity.com/cve-alert-cve-2026-9586-sangoma-switchvox-smb-edition/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-9586 #sangoma #switchvox-smb-edition

CVE-2026-9586, a critical Sangoma Switchvox vulnerability, is exploited in the wild, giving unauthenticated attackers SQL injection and remote code execution.

#Sangoma #Switchvox #CVE20269586 #RCE #SQLInjection #VoIP #InfoSec #ExploitedInTheWild

https://securityonline.info/sangoma-switchvox-cve-2026-9586-rce/?utm_source=mastodon&utm_medium=jetpack_social

configuring #VPS that I'd had dormant for a while (was being used for experimental stuff) as proof of concept for #Cloud #VOIP #PBX using #FreePBX and #Asterisk with #Debian12 and the #Sangoma install script.

TIL: to get #PostFix to work correctly with #IONOS without paying for the commercial System Admin module you *must* install

>apt install libsasl2-modules

or else the emails get knocked back with message "no worthy mechs found" which sounds like some kind of robot battle 😁 🤖

also added a swapfile (VPS doesn't have one normally), knocked off the commercial modules (which I don't use) and managed to get a couple of eztensions and routes working (after some false starts as I'm using an unusual config linking to another virtual #pbx)

https://sangomakb.atlassian.net/wiki/spaces/PP/pages/73990871/PBX+Platforms+-+Setup+Postfix+Manually

Sangoma Patches Critical Zero-Day Exploited to Hack FreePBX Servers – Source: www.securityweek.com https://ciso2ciso.com/sangoma-patches-critical-zero-day-exploited-to-hack-freepbx-servers-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #vulnerabilities #securityweekcom #CVE-2025-57819 #securityweek #Sangoma

Sangoma Patches Critical Zero-Day Exploited to Hack FreePBX Servers https://www.securityweek.com/sangoma-patches-critical-zero-day-exploited-to-hack-freepbx-servers/ #Vulnerabilities #CVE202557819 #Sangoma

Sangoma Patches Critical Zero-Day Exploited to Hack FreePBX Servers https://www.securityweek.com/sangoma-patches-critical-zero-day-exploited-to-hack-freepbx-servers/ #Vulnerabilities #CVE202557819 #Sangoma

Blogged: Sangoma continues to disappoint

https://www.fredposner.com/sangoma-continues-disappoint/

#asterisk #freepbx #sangoma

Bass. Bass. Wir brauchen Bass. https://sangomarecs.bandcamp.com/album/the-seed #sangoma #dakshinamurti

https://givebutter.com/sustainMA The Makhosi Foundation is a multicultural hub of indigenous wisdom doing great work in Southern California #psychedelics #plantmedicine #psychedelicreciprocity #sangoma #mentalhealth #blackmastodon #bipoc #indigenous #psychedelictherapy #SOUTHAFRICA #culture #psychedelicsociety

Well this is sad. Three security vulnerabilities in #freepbx that #Sangoma have dropped the ball on totally.

It's even worse that they appear to have totally abandoned the bug bounty process that I worked so hard to set up.

https://www.youtube.com/watch?v=rqFJ0BxwlLI&t=810s

Nothing quite like needing to figure out a #pbx system in under 2 months. #asteriskpbx looks good, but I need to investigate the #sangoma #phone lineup, or at least see what phones I can modify to work with it.

That said, I'm still stuck without my server, but I'll at least have my router, which I can put a small LXC container on to test Asterisk.

Guess it's time to unsubscribe from the #Sangoma "open solutions" newsletter.

The only mention of open source was to link to Alan Quayle's survey.

You figure this was a great opportunity to mention that #Asterisk had been moved to GitHub, or mention the new release(s).

It's incredibly sad to see how Sangoma handles Asterisk and I again am left to believe that they just don't have any care of an open source community.

See also my thoughts post #astricon : https://www.fredposner.com/sangoma-still-doesnt-get-os/

#MiriamMakeba's #Sangoma album from 1988. Timeless vocal beauty.
https://youtube.com/playlist?list=OLAK5uy_kjkbtm_sTe1hGqgIs-iCSntNSbQK5XaZ8