[{"data":1,"prerenderedAt":61},["ShallowReactive",2],{"sicherheitsluecke-cve-2026-9586":3},{"l":4,"details":29,"weitere":32,"indexierbar":59,"updated":60},{"cve":5,"status":6,"vendor":7,"product":8,"name":9,"added":10,"due":11,"ransomware":12,"published":13,"cwes":14,"cvss":16,"epss":21,"slug":24,"bereich":25,"schweregrad":26,"art":27,"produktLabel":28},"CVE-2026-9586","ausgenutzt","Sangoma","Switchvox","Sangoma Switchvox SQL Injection Vulnerability","2026-09-02","2026-09-05",false,"2026-07-17",[15],"CWE-89",{"version":17,"score":18,"severity":19,"vector":20},"4.0",9.3,"CRITICAL","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",{"score":22,"percentile":23},0.18979,0.97325,"cve-2026-9586","web","kritisch","Einschleusen von Datenbankbefehlen (SQL-Injection)","Sangoma Switchvox",{"description":30,"refs":31},"An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The \u002Fpa endpoint processes XML content beginning with \u003CPolycomIPPhone> and directly concatenates the user-controlled PhoneIP value into PostgreSQL queries without sanitization or parameterization. An unauthenticated remote attacker can execute arbitrary SQL statements against the backend PostgreSQL database using a single crafted request, including database operations and remote code execution.",[],[33,43,52],{"cve":34,"status":6,"produktLabel":35,"vendor":36,"product":37,"art":38,"bereich":25,"schweregrad":39,"score":40,"epss":41,"added":42,"ransomware":12},"CVE-2026-111793","Openwave Webtop Media Transcoder","Openwave Messaging Limited","Webtop Media Transcoder","Fehlerhafte Weitergabe von Ressourcen","mittel",4.3,0.00274,"2026-11-10",{"cve":44,"status":6,"produktLabel":45,"vendor":46,"product":47,"art":48,"bereich":25,"schweregrad":26,"score":49,"epss":50,"added":51,"ransomware":12},"CVE-2026-116779","SignalWire FreeSwitch","SignalWire","FreeSwitch","Einschleusen von Befehlen (Command Injection)",9.8,0.02177,"2026-11-09",{"cve":53,"status":6,"produktLabel":54,"vendor":55,"product":56,"art":57,"bereich":25,"schweregrad":26,"score":49,"epss":58,"added":51,"ransomware":12},"CVE-2026-123218","IBM Aspera Faspex","IBM","Aspera Faspex","Fehlerhafte Berechtigungsprüfung",0.00705,true,"2026-11-11T14:28:43.107Z",1794407349829]