Sangoma

Sangoma develops a modestly represented but strategically prominent portfolio centered on FreePBX, Asterisk, and session border control products that serve telecommunications infrastructure and VoIP deployments worldwide. Vulnerabilities affecting the vendor skew toward serious outcomes, with an elevated share reaching critical severity and a moderate tendency toward public exploit availability, reflecting the sensitivity of voice-communications platforms to both in-the-wild attack and proof-of-concept development. The exposure recurs across the Asterisk ecosystem and unified communications appliances through a durable set of input-handling and authentication weaknesses—cross-site scripting, SQL injection, OS command injection, path traversal, and improper authentication—that are characteristic of web-facing telephony management interfaces and protocol parsing layers. Defenders should treat updates to these core products as operationally critical given their role in call routing and session management; current exploitation activity and severity counts are shown alongside this summary.