VoIP Security

FreeSWITCH api-chat RCE Exploited in the Wild, Patch Now

• Vulnerability

FreeSWITCH api-chat RCE Exploited in the Wild, Patch Now

Do Son September 4, 2026 0

SignalWire shipped FreeSWITCH 1.11.3 on August 28, 2026. The vendor called it an important release with critical...

Read More Read more about FreeSWITCH api-chat RCE Exploited in the Wild, Patch Now

CVE-2026-9586: Switchvox RCE Exploited in the Wild

• Vulnerability Report

CVE-2026-9586: Switchvox RCE Exploited in the Wild

Do Son September 1, 2026 0

TL;DR Attackers are exploiting CVE-2026-9586 in the wild. This critical Sangoma Switchvox vulnerability turns an unauthenticated SQL...

Read More Read more about CVE-2026-9586: Switchvox RCE Exploited in the Wild

FreePBX Vulnerabilities Enable Unauthenticated RCE and Administrator Takeover

• Vulnerability Report

FreePBX Vulnerabilities Enable Unauthenticated RCE and Administrator Takeover

Do Son July 22, 2026 0

TL;DR Two new FreePBX vulnerabilities each carry a CVSS score of 9.3. One gives unauthenticated remote code...

Read More Read more about FreePBX Vulnerabilities Enable Unauthenticated RCE and Administrator Takeover

Poly VoIP Phone Vulnerability Revealed with Public Exploit Code Disclosed

• Vulnerability Report

Poly VoIP Phone Vulnerability Revealed with Public Exploit Code Disclosed

Do Son June 5, 2026 0

Serious Flaw Discovered in Popular Office Hardware A critical security flaw has been exposed in modern workplace...

Read More Read more about Poly VoIP Phone Vulnerability Revealed with Public Exploit Code Disclosed

VoIP Backbone Exposed: Critical FreePBX Flaw (CVE-2026-46376) Allows Unauthenticated Access to User Portals

• Vulnerability Report

VoIP Backbone Exposed: Critical FreePBX Flaw (CVE-2026-46376) Allows Unauthenticated Access to User Portals

Do Son May 20, 2026 0

FreePBX, widely recognized as the world’s most popular open-source IP PBX platform for building customized phone systems,...

Read More Read more about VoIP Backbone Exposed: Critical FreePBX Flaw (CVE-2026-46376) Allows Unauthenticated Access to User Portals

PoC Publicly Disclosed: Critical Grandstream VoIP Flaw (CVSS 9.3) Grants Stealthy Root Access

• Vulnerability Report

PoC Publicly Disclosed: Critical Grandstream VoIP Flaw (CVSS 9.3) Grants Stealthy Root Access

Do Son February 20, 2026 0

If your office desks are equipped with Grandstream GXP1600 series phones, you might want to pause the...

Read More Read more about PoC Publicly Disclosed: Critical Grandstream VoIP Flaw (CVSS 9.3) Grants Stealthy Root Access

Google Voice Now Requires Government ID to Stop “Gray Market” Scammers

• Technology

Google Voice Now Requires Government ID to Stop “Gray Market” Scammers

Do Son February 9, 2026 0

Google provides users with complimentary United States mobile numbers via Google Voice for VOIP teleconferencing and messaging...

Read More Read more about Google Voice Now Requires Government ID to Stop “Gray Market” Scammers

Silent Intruder: “EncystPHP” Web Shell Burrows into FreePBX Systems

• Cybercriminals
• Vulnerability Report

Silent Intruder: “EncystPHP” Web Shell Burrows into FreePBX Systems

Do Son February 2, 2026 0

A sophisticated new web shell has been discovered burrowing into communication infrastructure, leveraging a critical vulnerability to...

Read More Read more about Silent Intruder: “EncystPHP” Web Shell Burrows into FreePBX Systems