Slican Ipx
5 CVEs affecting Slican Ipx. Latest disclosed: 2026-10-15. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-63315 | | 2026-10-15 | WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext. An attacker with access to the database can obtain the use… | |
CVE-2026-63314 | | 2026-10-15 | WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/admin_json.php enpoint. Improper neutralization of input allows an… | |
CVE-2026-35088 | | 2026-10-15 | Slican telephone exchanges use symmetric encryption for TCP/IP communication. Secret key is hardcoded in multiple binary files. An attacker who has access to t… | |
CVE-2026-35089 | | 2026-05-27 | In Slican telephone exchanges secure key is generated in a predictable manner using properties of the telephone exchange which can be obtained without authenti… | |
CVE-2026-35087 | | 2026-05-27 | Slican telephone exchanges allow administrative protocol authentication bypass. An attacker can bypass the need to enter login credentials by executing the app… |