{"apiVersion":"1","notice":"Security Threat Pulse API v1. Free, no key. Facts with sources; verdicts follow the published rules at https://securitythreatpulse.com/methodology. Not advice. Some source data is withheld here until its terms allow re-serving.","generatedAt":"2026-11-11T08:30:36.442Z","products":["sangoma"],"actNowTotal":1,"results":[{"query":"sangoma","matched":1,"actNow":1,"events":[{"id":"kev-2026-09-02-sangoma-switchvox","url":"https://securitythreatpulse.com/events/kev-2026-09-02-sangoma-switchvox","title":"Sangoma Switchvox: attackers can read or change its database","verdict":"act_now","verdictReason":"Attacks are confirmed. The vulnerability is 107 days old, so current versions are being attacked. Ready-made attack tools are public. The severity score is critical (9.3).","tier":null,"rankScore":null,"rankWhy":null,"rulesVersion":"v2","ladder":{"talk":"none","damage":"none","attempts":"confirmed","exposure":"none","exploited":"confirmed"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2026-9586"],"vendor":"Sangoma","product":"Switchvox","affectedProducts":[{"vendorKey":"sangoma","productKey":"switchvox","vendor":"Sangoma","product":"Switchvox","slug":"sangoma/switchvox","kind":"direct","evidence":["kev"]}],"category":{"id":"business-app","label":"Business software","why":"It runs day-to-day business work such as finance, printing, phones or manufacturing.","doThis":"Ask the vendor or the team that owns it whether the fix is in."},"summary":"Sangoma Switchvox contains a SQL injection vulnerability which allows an unauthenticated remote attacker to execute arbitrary SQL statements against the backend PostgreSQL database using a single crafted request, including database operations and remote code execution.","cvss":9.3,"epss":0.18979,"exploitMaturity":"weaponized","kevListed":true,"kevDateAdded":"2026-09-02","kevDueDate":"2026-09-05","firstSeenAt":"2026-09-02T00:00:00.000Z","updatedAt":"2026-11-01T16:07:40.213Z","newestEvidenceAt":"2026-10-24T23:23:07.997Z"}]}]}