Plaintext SIP Credentials Vulnerability in Sangoma Switchvox Products

CVE-2026-45362

What is CVE-2026-45362?

Sangoma Switchvox prior to version 8.4 contains a significant vulnerability where SIP authentication credentials are stored in cleartext within backup files. This exposure can lead to unauthorized access to the system, potentially allowing attackers to exploit these credentials for malicious purposes. Users of affected versions are strongly advised to upgrade to the latest release to mitigate this risk and enhance the overall security posture of their deployments.

References