This vulnerability (CVE-2026-9585) affects Sangoma Switchvox SMB Edition 8.3 (104997) and is classified as CWE-79 (Improper Neutralization of Input During Web Page Generation). It is a reflected cross-site scripting issue where the 'portal' parameter is not properly sanitized in specific handlers, leading to injection of malicious scripts into JavaScript context. The vulnerability is exploitable remotely without authentication and can result in script execution in the context of the victim's browser.

Successful exploitation allows an attacker to execute arbitrary JavaScript in the context of the victim's browser, potentially leading to session hijacking, credential theft, or other malicious actions within the scope of the affected web application. The vulnerability is exploitable without authentication, increasing its risk. However, there are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround has been documented. Until a patch is available, users should exercise caution when interacting with the affected application and consider restricting access or applying compensating controls if feasible.