Predictable Secure Key Generation in Slican Telephone Exchanges

CVE-2026-35089

What is CVE-2026-35089?

Slican telephone exchanges have a vulnerability where the secure key is generated predictably, allowing unauthenticated attackers to extract sensitive information, including admin credentials. This issue affects various series of Slican devices, especially those that are discontinued and no longer supported. Users are encouraged to upgrade to later versions to mitigate this risk, as older models remain susceptible to exploitation.

References