CVE Field Guide
About Us
CVE-2026-45362
PUBLISHED
Assigner:
mitre
Reserved:
12.05.2026
Published:
12.05.2026
Updated:
12.05.2026
Sangoma Switchvox before 8.4 places cleartext SIP authentication credentials in a backup file.
Metrics
CVSS 3.1
CVSS Vector:
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N
CVSS Score:
3.2
CVSS score
3.2
Attack Vector
Local
Scope
Changed
Attack Complexity
High
Confidentiality Impact
Low
Privileges Required
None
Integrity Impact
None
User Interaction
None
Availability Impact
None
CVSS 3.1
Product Status
Vendor
Sangoma
Product
Switchvox
Versions
Default:
unaffected
affected from 0 to 8.4 (excl.)
References
https://github.com/wb6vpm/switchvox-svb-plaintext-sip-credentials/
https://github.com/sangoma/security-switchvox/security/advisories/GHSA-mfm3-g35x-c9w8
Problem Types
CWE-312 Cleartext Storage of Sensitive Information
CWE