CVE-2026-35087: Authentication Bypass in Slican telephone exchanges
Slican telephone exchanges allow administrative protocol authentication bypass. An attacker can bypass the need to enter login credentials by executing the appropriate command.
This issue was fixed in versions below: - NCP: version 1.24.0250 - IPx series: version 6.61.0040 - CCT-1668: version 6.56.0430 - MAC-6400: version 6.56.0430 - CXS-0424: version 6.30.0510
The issue STILL EXISTS in End-Of-Life telephone exchanges in versions 4.xx and below: - CCT-1668 (CCT1CPU) - MAC-6400 - CXS-0424 These products were discontinued in 2011 and 2012 and and will not receive updates. These products require a hardware update in order to receive a software update. The vendor recommends that users of these devices contact the their service department directly to determine the options for upgrading.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-35087?
The severity of CVE-2026-35087 is critical with a CVSS score of 9.3.
How do I fix CVE-2026-35087?
To fix CVE-2026-35087, upgrade to SLICAN NCP version 1.24.0250, IPx series version 6.61.0040, or CCT-1668 version 6.56.0 or later.
What type of vulnerability is CVE-2026-35087?
CVE-2026-35087 is an authentication bypass vulnerability affecting Slican telephone exchanges.
What can an attacker do with CVE-2026-35087?
An attacker can bypass the need for login credentials and gain unauthorized access to administrative functions in Slican telephone exchanges.
Which Slican products are affected by CVE-2026-35087?
CVE-2026-35087 affects SLICAN NCP, SLICAN IPx series, SLICAN CCT-1668, SLICAN MAC-6400, and SLICAN CXS-0424.