https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T21:28:57.715163+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-9587 CVE-2026-9587 — Authenticated Local File Inclusion (LFI) in Switchvox SMB Web Portal 2026-10-06T21:28:57.716994+00:00

Affected: Sangoma Switchvox SMB Edition

An authenticated local file inclusion vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The play_file functionality accepts user-controlled input through the sound_path parameter and fails to properly validate file paths before accessing the underlying filesystem. By supplying absolute paths, an authenticated attacker can retrieve files outside the intended directory scope.