PT-2026-39906 · Sangoma · Switchvox

Published 2026-05-12 · Updated 2026-05-12 · CVE-2026-45362

Positive Technologies (AI Summary)

CVSS v3.1

3.2

Low

Base vector

AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sangoma Switchvox versions prior to 8.4

Description Sangoma Switchvox stores SIP authentication credentials in cleartext within backup files. SIP (Session Initiation Protocol) is a signaling protocol used for initiating, maintaining, and terminating real-time sessions that include voice, video, and messaging applications.

Recommendations Update to version 8.4 or later.

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2026-45362

Affected Products

Switchvox

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-45362 · Security Note
• https://github.com/sangoma/security-switchvox/security/advisories/GHSA-mfm3-g35x-c9w8 · Note
• https://t.me/CVEtracker/53441 · Telegram Post
• https://github.com/wb6vpm/switchvox-svb-plaintext-sip-credentials · Note
• https://twitter.com/VulmonFeeds/status/2054140895704871358 · Twitter Post
• https://twitter.com/CVEarity/status/2054092295277101104 · Twitter Post