CVE-2026-9587 | An authenticated local file inclusion vulnerability exists i… | CVSS 7.1 HIGH

Description

An authenticated local file inclusion vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The play_file functionality accepts user-controlled input through the sound_path parameter and fails to properly validate file paths before accessing the underlying filesystem. By supplying absolute paths, an authenticated attacker can retrieve files outside the intended directory scope.

Metadata

CVE ID: CVE-2026-9587
State: PUBLISHED
Assigner: SRA
Reserved: 2026-05-26 13:03 UTC
Published: 2026-07-17 15:58 UTC
Last updated: 2026-07-17 16:42 UTC
Primary CWE: CWE-73
CWE-73 External control of file name or path
Vendor / Product: Sangoma / Switchvox SMB Edition
Sources: cve.org · NVD

Severity & Metrics

7.1 HIGH CVSS 4.0

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

SSVC — CISA Coordinator

Exploitation: none
Automatable: no
Tech. Impact: partial

Affected products (1)

Vendor	Product	Platform	Versions
Sangoma	Switchvox SMB Edition	—	8.3 (104997) < 8.4.0.2

Weakness (CWE)

CWE	Source	Description
CWE-73	cna	CWE-73 External control of file name or path

CVSS scores (1)

Score	Severity	Version	Source	Vector
7.1	HIGH	4.0	cna	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

References (2)