Sangoma vulnerabilities
We track 43 vulnerabilities in Sangoma products across 6 products. 43 are rated high or critical, and 3 have been exploited in real attacks. The most recent was published on September 28, 2026.
Latest Sangoma vulnerabilities
- 9.8 Critical severity
pjproject: Use After Free
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions up to and including 2.11.1 when in a dialog set (or forking) scenario, a hash k
- 9.1 Critical severity
pjproject: Out-of-bounds Read
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions 2.11.1 and prior, parsing an incoming SIP message that contains a malformed mul
- 9.8 Critical severity
Sangoma FreePBX Improper Authentication Exploited
Sangoma FreePBX 115.0.16.26 and below, 14.0.13.11 and below, 13.0.197.13 and below have Incorrect Access Control.