> TritonInfoSec News
Home / Sep 03, 2026 / Story
0
#8 The Hacker News general September 02, 2026 at 07:08 UTC

Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials

By [email protected] (The Hacker News)

AI Summary

CVE-2026-9586, a CVSS 9.3 unauthenticated SQL injection flaw in Sangoma Switchvox SMB Edition 8.3 (build 104997), is being actively exploited to deploy reverse shells without credentials on enterprise VoIP infrastructure. The vulnerability allows full remote code execution on affected systems, which are commonly deployed for PBX functions in SMB environments. Organizations running Switchvox should apply available patches immediately and audit for indicators of reverse shell activity.

Read full article → https://thehackernews.com/2026/09/attackers-exploi…

Relevance score: 81.0/100

# More from September 03

  1. 1
    FBI Probes Service Selling 153M+ Drivers Licenses Krebs on Security
  2. 2
    Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain The Hacker News
  3. 3
    Authorities Turn Sality's P2P Network Against Itself, Cutting Off New Malware Payloads The Hacker News
  4. 4
    Health data of more than 9.5 million people leaked from Aesto record system The Record
  5. 5
    Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure The Hacker News
  6. 6
    BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access The Hacker News
  7. 7
    Pegasus, NoviSpy variant spyware found on devices of Serbian activists CyberScoop
  8. 9
    Nearly 22,000 Microsoft Exchange servers vulnerable to hijack attacks BleepingComputer
  9. 10
    Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code The Hacker News