Follow the latest coverage, related explainers and connected technology stories.
Researchers are observing active exploitation of CVE-2026-9586 in the Sangoma Switchvox voice communications platform, a SQL injection vulnerability that requires no authentication and can lead to remote command execution. Sangoma issued a fix in version 8.4.0.2, while Horizon3 warned that most systems exposed to the internet are being targeted.