2026 CVE Database
Every Critical and High CVE published in 2026, with the signals you need to decide what to fix first.
12 CVEs found
| CVE | Severity | Product | Weakness | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2026-73665 Sangoma Freepbx | CRITICAL9.3 | Sangoma Freepbx | CWE-862 Missing Authorization | 0.3% | Aug 13, 2026 |
| CVE-2026-73663 Sangoma Freepbx | CRITICAL9.3 | Sangoma Freepbx | CWE-89 SQL Injection | 0.4% | Aug 13, 2026 |
| CVE-2026-73662 Sangoma Freepbx | HIGH7.6 | Sangoma Freepbx | CWE-78 OS Command Injection | 0.9% | Aug 13, 2026 |
| CVE-2026-9586 Exploited Sangoma Switchvox | CRITICAL9.3 | Sangoma Switchvox | CWE-89 SQL Injection | 19.0% | Jul 17, 2026 |
| CVE-2026-46376 Sangoma Freepbx | CRITICAL9.3 | Sangoma Freepbx | CWE-798 Hard Coded Credentials | 0.5% | May 29, 2026 |
| CVE-2026-44239 Sangoma Freepbx | HIGH7.6 | Sangoma Freepbx | CWE-98 | 0.5% | May 29, 2026 |
| CVE-2026-44238 Sangoma Freepbx | HIGH8.5 | Sangoma Freepbx | CWE-89 SQL Injection | 0.5% | May 29, 2026 |
| CVE-2026-44237 Sangoma Freepbx | HIGH7.6 | Sangoma Freepbx | CWE-1390 | 0.4% | May 29, 2026 |
| CVE-2026-28287 Sangoma Freepbx | HIGH8.6 | Sangoma Freepbx | CWE-78 OS Command Injection | 1.6% | Mar 5, 2026 |
| CVE-2026-28284 Sangoma Freepbx | HIGH8.6 | Sangoma Freepbx | CWE-89 SQL Injection | 0.5% | Mar 5, 2026 |
| CVE-2026-28210 Sangoma Freepbx | HIGH8.6 | Sangoma Freepbx | CWE-89 SQL Injection | 0.6% | Mar 5, 2026 |
| CVE-2026-28209 Sangoma Freepbx | HIGH7.5 | Sangoma Freepbx | CWE-78 OS Command Injection | 1.5% | Mar 5, 2026 |
Your next credential
Earn your free CTEM certification.
Knowing the CVE is step one. Learn to scope, prioritize, validate and mobilize fixes with a free CTEM certification.
Free to takePublicly verifiable
Beginner / Practitioner / Program Leader
Explore certifications