Beveiligingsadvies

CVE-2026-9587

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-17 15:58:25

Laatst bijgewerkt 2026-07-17 16:42:37

Toegewezen door SRA

CVSS-score 7.1

Status PUBLISHED

Beschrijving

An authenticated local file inclusion vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The play_file functionality accepts user-controlled input through the sound_path parameter and fails to properly validate file paths before accessing the underlying filesystem. By supplying absolute paths, an authenticated attacker can retrieve files outside the intended directory scope.

← Alle CVE's bekijken Bekijk op cve.org ↗