CVE-2026-63315 Slican CVE debrief

Who should care

Defenders responsible for Slican IPx telephone exchanges should assess exposure and prioritize remediation. This includes operators, platform administrators, vulnerability management teams, and security teams who need to verify IPx series versions and upgrade to 6.62.0100 or later if necessary. They should also restrict access to the database, monitor for suspicious activity, and review compensating controls for exposed systems while remediation is pending

Why it matters

CVE-2026-63315 is a high-severity vulnerability in Slican IPx telephone exchanges that allows attackers with database access to obtain plaintext temporary subscriber passwords and log in to subscriber accounts. Defenders should prioritize verifying and remediating this vulnerability in IPx series versions prior to 6.62.0100.

• Password compromise is possible for attackers with database access
• Subscriber account login is possible for attackers with obtained passwords
• Verification of IPx series version is necessary to determine exposure
• Remediation requires upgrading to IPx series version 6.62.0100 or later

Technical summary

The WebCTI service for Slican IPx telephone exchanges stores temporary subscriber passwords in plaintext. An attacker with access to the database can obtain the user's password and log in to the subscriber's account. This issue was fixed in IPx series version 6.62.0100. The vulnerability has a high severity with a CVSS score of 8.2, indicating a significant risk to affected systems. Defenders should prioritize verifying and remediating this vulnerability in IPx series versions prior to 6.62.0100, focusing on restricting database access and monitoring for suspicious activity.

Defensive priority

Defenders should prioritize verifying and remediating this vulnerability in IPx series versions prior to 6.62.0100.

Recommended defensive actions

• Verify IPx series version and upgrade to 6.62.0100 or later if necessary
• Restrict access to the database
• Monitor for suspicious activity
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and NVD entry indicate that the WebCTI service for Slican IPx telephone exchanges stores temporary subscriber passwords in plaintext. An attacker with access to the database can obtain the user's password and log in to the subscriber's account. This issue was fixed in IPx series version 6.62.0100.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.