Kobikom Telecommunications and Informatics Services Inc. vulnerabilities and threats

CVE-2026-105321 is a high-severity SQL Injection vulnerability in Kobikom Telecommunications and Informatics Services Inc.'s Kobikom product. The flaw exists due to improper neutralization of special elements in SQL commands, allowing an attacker to inject SQL code. This vulnerability affects versions before KobiPBX-FOP3-SEC-r1. A fix is available in the KobiPBX-FOP3-SEC-r1 release.

CVE-2026-104720 is a path traversal vulnerability in Kobikom Telecommunications and Informatics Services Inc.'s Kobikom product. The flaw allows an attacker to access files outside the intended restricted directory. This vulnerability affects versions before KobiPBX-FOP3-SEC-r1. It has a high severity with a CVSS score of 7.5. A fixed version, KobiPBX-FOP3-SEC-r1, is available.