Slican has 3 CVEs on record. 3 were published in the last 90 days. The busiest recent month was October 2026 with 3. The median CVSS is 8.2 (high).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 8.2
- Publish → KEV
- —
- Last 90 days
- 3 prev 0
Worst active — by depth score
CVE-2026-63314High· 8.7WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/admin_json.php enpoint48CVE-2026-63315High· 8.2WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext45CVE-2026-35088High· 8.2Slican telephone exchanges use symmetric encryption for TCP/IP communication45
Slican vulnerabilities
CVEs affecting Slican, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2026-63315High· 8.2WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext
WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext. An attacker with access to the database can obtain the user's password and log in to the subscriber's account. This issue was fixed i…
CVE-2026-63314High· 8.7WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/admin_json.php enpoint
WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/admin_json.php enpoint. Improper neutralization of input allows an authenticated attacker to execute SQL Injection attacks. This issue was fixe…
CVE-2026-35088High· 8.2Slican telephone exchanges use symmetric encryption for TCP/IP communication
Slican telephone exchanges use symmetric encryption for TCP/IP communication. Secret key is hardcoded in multiple binary files. An attacker who has access to these files can decrypt the communication. This issue was fixed in IPx series …