https://patchfirst.co/vendor/sangoma/New and newly exploited Sangoma CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2026-9586/CVE-2026-9586#kevWed, 02 Sep 2026 00:00:00 GMTSangoma · Switchvox. In CISA KEV since 2026-09-02. ENISA EUVD lists it as exploited. EPSS 19.0% (higher than 97.3% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.3 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2025-64328/CVE-2025-64328#kevTue, 03 Feb 2026 00:00:00 GMTSangoma · FreePBX . In CISA KEV since 2026-02-03. ENISA EUVD lists it as exploited. EPSS 84.6% (higher than 99.7% of CVEs). CVSS 7.2 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 73.0 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2019-19006/CVE-2019-19006#kevTue, 03 Feb 2026 00:00:00 GMTSangoma · FreePBX. In CISA KEV since 2026-02-03. ENISA EUVD lists it as exploited. EPSS 55.9% (higher than 99.05% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 69.7 of 100.kevpublic-exploitT1190T1005https://patchfirst.co/cve/CVE-2025-57819/CVE-2025-57819#kevFri, 29 Aug 2025 00:00:00 GMTSangoma · FreePBX. In CISA KEV since 2025-08-29. ENISA EUVD lists it as exploited. EPSS 95.2% (higher than 99.86% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.8 of 100.kevpublic-exploitT1190T1059