Skip to content

Product

Slican IPx vulnerabilities

5 published CVES affecting Slican IPx, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
5
Critical
1
High
4
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest Slican IPx CVEs

Newest publication first

  1. CVE-2026-63315 Plaintext storage of a password in WebCTI

    Published
    HighCVSS 8.2 EPSS 0.29%

    WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext. An attacker with access to the database can obtain the user's password and log in to the subscriber's account. This issue was fixed in IPx series version 6.62.0100.

  2. CVE-2026-63314 SQL Injection in WebCTI

    Published
    HighCVSS 8.7 EPSS 0.22%

    WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/admin_json.php enpoint. Improper neutralization of input allows an authenticated attacker to execute SQL Injection attacks. This issue was fixed in IPx series version 6.62.0100.

  3. CVE-2026-35088 Inadequate Encryption Strength in Slican telephone exchanges

    Published
    HighCVSS 8.2 EPSS 0.12%

    Slican telephone exchanges use symmetric encryption for TCP/IP communication. Secret key is hardcoded in multiple binary files. An attacker who has access to these files can decrypt the communication. This issue was fixed in IPx series version 6.62.0100. The issue STILL EXISTS in...

  4. CVE-2026-35089 Use of Weak Credentials in Slican telephone exchanges

    Published
    HighCVSS 8.7 EPSS 0.59%

    In Slican telephone exchanges secure key is generated in a predictable manner using properties of the telephone exchange which can be obtained without authentication. An unauthenticated attacker can deduce the secure key and obtain admin credentials. This issue was fixed in versi...

  5. CVE-2026-35087 Authentication Bypass in Slican telephone exchanges

    Published
    CriticalCVSS 9.3 EPSS 0.66%

    Slican telephone exchanges allow administrative protocol authentication bypass. An attacker can bypass the need to enter login credentials by executing the appropriate command. This issue was fixed in versions below: NCP: version 1.24.0250 IPx series: version 6.61.0040 CCT-1668:...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.