VYPR

WebCTI service

by Slican

CVEs (1)

  • CVE-2026-63314HigOct 15, 2026
    risk 0.57cvss —epss —

    WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/admin_json.php enpoint. Improper neutralization of input allows an authenticated attacker to execute SQL Injection attacks. This issue was fixed in IPx series version 6.62.0100.