Authenticated Local File Inclusion in Sangoma Switchvox SMB Edition

Executive Summary

This is an authenticated local file inclusion vulnerability in Sangoma Switchvox SMB Edition 8.3. The play_file function uses the sound_path parameter to access files but does not properly validate file paths. An attacker with valid credentials can exploit this by providing absolute file paths to read files outside the intended directory.

Useful 0 Not Useful 0

Detection Guidance

To detect CVE-2026-9587, check for unauthorized file access attempts via the play_file functionality in Sangoma Switchvox SMB Edition 8.3 (104997) or earlier. Monitor logs for requests containing absolute file paths in the sound_path parameter. Verify if files outside the intended directory are being accessed.

Useful 0 Not Useful 0

Impact Analysis

An authenticated attacker could access sensitive files on the system, including configuration files, logs, or other restricted data. This could lead to information disclosure, privilege escalation, or further compromise of the Switchvox system.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating compliance requirements such as GDPR (data protection) or HIPAA (health information privacy). Organizations may face legal penalties, reputational damage, and loss of trust due to data breaches.

Useful 0 Not Useful 0

Mitigation Strategies

Apply the latest security patches from Sangoma for Switchvox SMB Edition 8.3. Restrict file access permissions to limit exposure. Monitor system logs for unusual file inclusion attempts. Disable or restrict access to the play_file functionality if not required.

Useful 0 Not Useful 0