WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Oct 15, 2026 · NIST NVD

   Detected

   WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext. An attacker with access to the database can obtain the user's password and log in to the subscriber's account. This issue was fixed in IPx series version 6.62.0100.

2. Oct 15, 2026 · NIST NVD

   Updated

   WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext. An attacker with access to the database can obtain the user's password and log in to the subscriber's account. This issue was fixed in IPx series version 6.62.0100.

Affected

• vendor Slican IPxversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-63315

  WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext. An attacker with access to the database can obtain the user's password and log in to the subscriber's account. This issue was fixed in IPx series version 6.62.0100.

  cve.org
• FIRST EPSSExploitation probabilityCVE-2026-63315

  30-day exploitation probability 0.3%

  first.org
• NIST NVDVulnerability recordCVE-2026-63315

  WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext. An attacker with access to the database can obtain the user's password and log in to the subscriber's account. This issue was fixed in IPx series version 6.62.0100.

  nvd.nist.gov

References

• Reference · cert.pl
• Reference · slican.pl