CVE Catalog

CVE-2026-45362

LowCVSS 3.2
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.10%

1th percentile - higher than 1% of all known CVEs

Summary

Sangoma Switchvox before 8.4 places cleartext SIP authentication credentials in a backup file.

Risk Assessment

Anyone with access to the backup file can read SIP credentials and impersonate a user or device.

Recommendation

Update Sangoma Switchvox to version 8.4 or later and restrict access to backup files.

Other vulnerabilities in Sangoma Switchvox

Original NVD description (English source)

Sangoma Switchvox before 8.4 places cleartext SIP authentication credentials in a backup file.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS