Vulnerability in Slican Ipx
CVE-2026-63315
WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext. An attacker with access to the database can obtain the user's password and log in to the subscriber's account. This issue was fixed in IPx series version 6.62.0100.
Published · last modified .
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Affected products
Weakness classification (CWE)
References
- cert.pl/posts/2026/08/CVE-2026-63314 (third-party-advisory)
- www.slican.pl/oferta/oprogramowanie/aplikacje-cti/webcti-dla-abonenta/ (product)