CVE-2025-32105: Sangoma IMG2020 Firmware

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

A buffer overflow in the the Sangoma IMG2020 HTTP server through 2.3.9.6 allows an unauthenticated user to achieve remote code execution.

Affected products

• Sangoma IMG2020 Firmware: up to and including 2.3.9.6

Published 2025-06-03. Last modified 2026-06-17.