All systems operationalSystems operational
Swiss Cloud Düdingen · 99.995% SLAMon to Fri 08:30 to 17:30+41 21 552 03 25
Switzerland · Over 12 years in business

Premium IT infrastructure, hosted in Switzerland.

Simplicity, precision, discretion and security. For over 12 years, DigitalCanion has been designing, hosting and operating the IT of demanding companies in its own Swiss datacenter.

Discover our services   Our Swiss Cloud

12+ yrsOf experience
99.995%SLA availability
24/7Support & on-call
100%Swiss company
Security Research

We find vulnerabilities at the world's largest vendors.

Our research team discovers previously unknown (0-day) vulnerabilities in the products of the world's largest vendors, reported under coordinated disclosure. Several critical vulnerabilities credited to DigitalCanion SA at SonicWall, VMware, Sophos, Novell, Apple, Mitel, OPNsense, WatchGuard and Kyocera: few Swiss providers can say the same. This offensive expertise directly protects our clients.

28published findings
50-day advisories
27referenced CVEs
10vendors
SonicWallVMwareSophosNovellAppleMitelOPNsenseWatchGuardKyoceraKoozali
NEW PAPER Technical publication Mitel MiVoice Office 400: shared object hijacking → root code execution Full analysis + proof-of-compromise video · CVE-2026-104809 · CVSS 8.4 Read →
MitelUpcoming

Mitel: vulnerability under coordinated disclosure

DGI-SWISS-000222026-09-01
9.1CVSS · Critical

Critical vulnerability in a Mitel product, rated CVSS 9.1. Reported on 1 September 2026 and undergoing coordinated disclosure ahead of public CVE publication. Discovered by DigitalCanion SA.

View all Mitel findings →
SonicWallPublished CVE

SonicWall Email Security: command injection via SNMP

ZDI-CAN-29029 · CVE-2026-66150 · ZDI-26-5302026-08-11
7.8CVSS · High

DigitalCanion SA identified a command injection vulnerability in SonicWall Email Security (ES 5000/5050/7000/7050/9000 appliances, VMware and Hyper-V), version 10.0.35.8405 and earlier. An authenticated attacker with access to the restricted CLI can inject OS commands executed as root via the SNMP parameter. Reported on April 16, 2026 and coordinated through the Zero Day Initiative (ZDI-CAN-29029), it was published on August 11, 2026 as CVE-2026-66150 (CVSS 7.8, High) in ZDI advisory ZDI-26-530 and SonicWall advisory SNWLID-2026-0012. Fixed in Email Security 10.0.36.

View all SonicWall findings →
WatchGuardUpcoming

WatchGuard: high-severity vulnerability

DGI-SWISS-00037 · CVE-2026-108152
8.5CVSS · High

DigitalCanion SA identified a high-severity vulnerability in a WatchGuard product, rated CVSS 8.5 (High). Referenced as DGI-SWISS-00037, it has been reported to the vendor and has already been assigned the identifier CVE-2026-108152 (reserved record); coordinated disclosure is under way. Technical details will be published once the embargo period ends; this page will be updated upon publication.

View all WatchGuard findings →
KyoceraUpcoming

Kyocera: high-severity vulnerability

DGI-SWISS-00034
7.1CVSS · High

DigitalCanion SA identified a high-severity vulnerability in a Kyocera product, rated CVSS 7.1 (High). Referenced as DGI-SWISS-00034, it has been reported to the vendor and is undergoing coordinated disclosure. Technical details and the CVE identifier will be published once the embargo period ends; this page will be updated upon release.

View all Kyocera findings →
KoozaliCVE assigned · NCSC

Koozali SME Server: high-severity vulnerability

DGI-SWISS-00036 · CVE-2026-1081202026-10-10
7.0CVSS · High

DigitalCanion SA identified a high-severity vulnerability in Koozali SME Server, rated CVSS 7.0 (High). Referenced as DGI-SWISS-00036, it has been assigned the identifier CVE-2026-108120 by the National Cyber Security Centre NCSC, the Swiss Confederation's CVE Numbering Authority (CNA). The CVE record is being published; technical details will be added once it appears in the global registry.

View all Koozali findings →
SophosExploit chain · unpatched

Sophos SFOS 21.05: trojanised SSHD and credential theft

Sophos SFOS 21.05.0.171
No CVSS score

An attacker with R/W access to the VM's storage can tamper with system binaries. Modifying the SSH daemon injects an arbitrary shell, guaranteeing highly persistent remote access that survives reboots, despite deceptive integrity-validation messages. Furthermore, cleartext communication between the GUI and the backend enables theft of administrator credentials. Sophos declined to fix these design flaws; no patch is expected.

View all Sophos findings →
National Cyber Security Centre NCSC

Our CVEs are assigned and published in coordination with the National Cyber Security Centre NCSC (DDPS), the Swiss Confederation's CVE Numbering Authority.

Zero Day Initiative (ZDI), Trend Micro

Our 0-days are validated and published by the Zero Day Initiative (Trend Micro), the world's largest bug bounty program.

SonicWall PSIRT Hall of Fame, DigitalCanion SA

DigitalCanion is listed in the SonicWall PSIRT Hall of Fame for vulnerabilities responsibly reported to SonicWall.

All our vulnerability research →

In the press

Our vulnerability findings in the press and CVE databases.

Our vulnerabilities at SonicWall, VMware, Sophos, Novell, Apple, Mitel, OPNsense, WatchGuard and Kyocera are published in the global CVE registry, validated by the Zero Day Initiative and covered by specialised cybersecurity media.

The Hacker News SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances Covers advisory SNWLID-2026-0017 and credits DigitalCanion SA for CVE-2026-102257 (Zip Slip, via the Zero Day Initiative) and CVE-2026-102258 (stored Cross-Site Scripting). 7 October 2026. Read the article → SecurityWeek SonicWall and Splunk Patch Critical Vulnerabilities The four SMA1000 vulnerabilities of advisory SNWLID-2026-0017, including our CVE-2026-102257 and CVE-2026-102258, fixed alongside the critical CVSS 10 SSRF. 8 October 2026. Read the article → CERT-FR · ANSSI Advisory CERTFR-2026-AVI-1275: multiple vulnerabilities in SonicWall SMA1000 The French national agency relays the SonicWall advisory and references CVE-2026-102257 and CVE-2026-102258 (SMA1000 12.4.3 and 12.5). 7 October 2026. View the CERT-FR advisory → Cybersecurity News Critical SonicWall Vulnerability Exploited in Attacks Following Disclosure Active exploitation of the SMA1000 SSRF two days after the fix; the article details the four CVEs, including the Zip Slip CVE-2026-102257 and the Cross-Site Scripting CVE-2026-102258. 13 October 2026. Read the article → Rapid7 · Vulnerability Database CVE-2026-102257: Zip Slip in SonicWall SMA1000 AMC Rapid7 entry for the vulnerability found by DigitalCanion: CVSS 7.2 (High), CWE-22, remote code execution via a specially crafted archive. 7 October 2026. View on Rapid7 → NCSC · Swiss Confederation Official list of CVEs published by the NCSC Our 8 Mitel MiVoice Office 400 CVEs (CVE-2026-104706, 104805 to 104811) top the list of CVEs assigned by the Swiss CVE Numbering Authority. 5 October 2026. View the NCSC list → Rapid7 · Vulnerability Database Rapid7 entries for the 8 Mitel CVEs found by DigitalCanion The Rapid7 vulnerability database lists every record with the credit "DigitalCanion has discovered…" and the CVSS 4.0 score (up to 8.5 High). 5 October 2026. View on Rapid7 → SecurityWeek SonicWall GMS · critical vulnerabilities patched Covers advisories SNWLID-2026-0011 (our CVE-2026-66148 and 66146) and SNWLID-2026-0012 (our CVE-2026-66149 and 66150). Read the article → THREATINT · CVE registry CVE records crediting DigitalCanion SA CVE-2026-3468, 3469 and 3470 (SonicWall Email Security): DigitalCanion SA as finder. View the CVE record → SecurityWeek SonicWall Email Security · flaws patched Covers CVE-2025-40604 and CVE-2025-40605. November 2025. Read the article → Nicolas Coolman SonicWall · patches and vulnerabilities Security media covering the SonicWall fixes, crediting DigitalCanion SA. Read the article →
Our services

100% hosted in Switzerland, fully managed by our teams.

From the initial audit to day-to-day operations, a single point of contact for your entire infrastructure.

SRV-01

Audit & Optimization

Cut your IT costs by 10 to 33% from the very first year.

Learn more →

SRV-02

Hosting

Email, websites and data hosted exclusively in Switzerland.

Learn more →

SRV-03

Virtual Servers

Your business software on a highly secure infrastructure.

Learn more →

SRV-04

Voice over IP

Virtual telephony, intercom systems and Mitel hosting.

Learn more →

SRV-05

WiFi Design

Site surveys, predictive planning and centralized management.

Learn more →

SRV-06

Managed IT

24/7 support & maintenance with on-call duty.

Learn more →

SRV-07

Web & SEO

With AI and automation, building your website becomes faster and less complex.

Learn more →

SRV-08

Cybersecurity

Penetration testing, ethical hacking and vulnerability research.

Learn more →

SRV-09

Artificial Intelligence

Experts in AI and data security: controlled automation and AI, hosted in Switzerland.

Learn more →

.Datacenter

Swiss Cloud, our own datacenter.

An ultra-modern hyperconverged infrastructure located in Düdingen. Your data stays in Switzerland, under Swiss law, operated by our own staff.

12+ yrsIn business
99.995%Availability
24/7Monitoring
CHSovereignty

Discover the datacenter

DigitalCanion Swiss Cloud datacenter
Our solutions

Smart solutions by industry.

.solar

Solar panels

Solar is the energy of the future: clean, renewable and intelligently controlled.

Learn more →

.5g

5G technology

Ultra-fast indoor 5G coverage for your buildings.

Learn more →

.property

Property management

Complete management for real estate agencies in a single platform.

Learn more →

Success stories

They trust us.

We wanted to focus on our core business, limit infrastructure and outsource IT services in line with the constraints of our profession. DigitalCanion delivered a solution and proved to be a competent, extremely responsive and always pleasant partner.

Christophe BuchwalderPartner, Gantey SA

Their efficiency and speed were highly appreciated by our site managers and engineers. Their WiFi modelling service and floor-plan analysis expertise enabled the large-scale deployment of over 250 access points.

Samuel ZinsiusSenior Project Manager, Implenia SA

Thanks to DigitalCanion we were able to outsource our financial management servers to their datacenter in Switzerland, guaranteeing confidentiality and security, with an overview of the security of our Dubai and Abu Dhabi sites.

Serdar AktasliSenior Executive Officer, Azimut (DIFC) Limited, Dubai

All testimonials   Our client references →

Frequently asked questions

Your questions, our answers.

What is a virtual server hosted in Switzerland?

A server dedicated to your business software, hosted in a datacenter in Switzerland. At DigitalCanion every server is unique and never shared, with secure SMA access and two-factor authentication, 30 to 90 day backups, in our Swiss Cloud in Düdingen.

Who performs vulnerability research and penetration testing in Switzerland?

DigitalCanion performs penetration testing and vulnerability research for multinationals and SMEs. Our research team has multiple vulnerabilities credited to DigitalCanion SA at SonicWall, validated by the Zero Day Initiative (including four findings rated CVSS 7.2 to 7.8) and published as CVEs such as CVE-2025-40604, CVE-2025-40605, CVE-2026-66148 and CVE-2026-66146.

Where is my data hosted?

Exclusively in Switzerland, in our own Swiss Cloud datacenter in Düdingen, under Swiss law, with 99.995% availability and 24/7 monitoring.

Do you offer secure artificial intelligence services?

Yes. We are experts in AI and data security: private AI hosted in Switzerland, intelligent automation and FADP/GDPR compliance, without exposing your sensitive data.

Which premium IT services does DigitalCanion offer?

Audit and cost optimization, Swiss hosting, virtual servers, VoIP and Mitel hosting, WiFi Design, 24/7 managed IT, AI-powered website creation, cybersecurity and artificial intelligence.