Switchvox - Release Notes Version 8.4.0.2 July 14, 2026
This article describes Switchvox version 8.4.0.2 (105309)
Previous version: https://sangomakb.atlassian.net/wiki/x/GwB_a
See also: Switchvox - What Sangoma P-Series Phone Firmware Ships with Switchvox?
Important: The article Switchvox - Release Notes Version 8.0.1 Sep 28, 2023 contains important information about updating from 7.9.5.2 to 8x, including information about hardware requirements and features that are deprecated. Please read that article before updating to any version 8.x.x.
New Features
New Feature and Enhancements | On-Prem | Cloud |
|---|---|---|
Scribe API Now Showing Used Minutes | ||
Scribe improved processing resilience | ||
Sangoma P Series Phone Firmware 4_28_1 |
Issues Resolved
Issue | On-Prem | Cloud |
|---|---|---|
CVE-2026-85070 (CWE-89) - Authenticated SQL Injection in Switchvox 8.2.2.1 | ||
CVE- 2026-85073 (CWE-22) - Unauthenticated Path Traversal in Switchvox 8.2.2.1 | ||
CVE-2026-85074 (CWE-78) - Admin-Level Command Injection in Switchvox 8.2.2.1 | ||
CVE-2026-85075 (CWE-78) - User-Level Command Injection in Switchvox 8.4 | ||
CVE-2026-85072 (CWE-269) - Local / Chained Vulnerabilities in Switchvox 8.2.2.1 | ||
CVE-2026-85071 (CWE-918) - Server-Side Request Forgery in Switchvox 8.2.2.1 | ||
CVE-2026-9588 - Authenticated Stored Cross-Site Scripting (XSS) in Switchvox Web Portal | ||
CVE-2026-9587 - Authenticated Local File Inclusion (LFI) in Switchvox Web Portal | ||
CVE-2026-9586 - Unauthenticated remote code execution via SQL Injection in Switchvox 8.2.2.1 | ||
CVE-2026-9585 - Unauthenticated Reflected Cross-Site Scripting (XSS) in Switchvox Web Portal |
References -