OOpenSIPS

Products

Exploited and recent CVEs

• CVE-2026-46334 High 8.7 OpenSIPS: Denial of Service in SDP bandwidth parsing via QoS SDP cloning 0.7%
• CVE-2026-45809 High 8.7 OpenSIPS: Denial of Service in watcherinfo XML generation from oversized watcher URI 0.6%
• CVE-2026-45705 Medium 5.3 OpenSIPS: OOB Read in Multipart Body Boundary Parsing 0.5%
• CVE-2026-45537 Critical 9.1 OpenSIPS: Global Buffer Overflow in construct_uri 0.6%
• CVE-2026-45103 High 7.5 OpenSIPS: SIP Message Smuggling via TCP Content-Length Integer Overflow 0.6%
• CVE-2026-45100 Critical 9.1 OpenSIPS: Buffer Overflow in Base64 Encode Transformation 0.8%
• CVE-2026-45084 High 8.7 OpenSIPS: Denial of service in presence.handle_publish() from unchecked Content-Type state 0.7%
• CVE-2026-45538 Critical 9.8 OpenSIPS: Stack Buffer Overflow in sip_to_json() Header Name Copy 0.8%
• CVE-2026-25554 Medium 6.5 OpenSIPS 3.1 <= 3.6.4 auth_jwt SQL Injection Enables JWT Authentication Bypass 0.4%
• CVE-2023-28099 Medium 5.9 OpenSIPS has vulnerability in the ds_is_in_list() function 0.9%
• CVE-2023-28098 Medium 5.9 OpenSIPS has vulnerability in the Digest Authentication Parser 0.9%
• CVE-2023-28097 High 7.5 OpenSIPS has vulnerability in the Content-Length Parser 1.0%
• CVE-2023-28096 Medium 4.5 OpenSIPS has memory leak in cJSON lib 0.8%
• CVE-2023-28095 High 7.5 OpenSIPS has vulnerability in the building the local negative replies 1.0%
• CVE-2023-27601 High 7.5 OpenSIPS has vulnerability in the codec_delete_XX() functions 1.0%
• CVE-2023-27600 High 7.5 OpenSIPS has vulnerability in the codec_delete_XX() functions 1.0%
• CVE-2023-27599 High 7.5 OpenSIPS has vulnerability in the parse_to_param() function 1.0%
• CVE-2023-27598 High 7.5 OpenSIPS has vulnerability in the parse_via() function 1.0%
• CVE-2023-27597 High 7.5 OpenSIPS has vulnerability in the parse_uri() function 0.7%
• CVE-2023-27596 High 7.5 OpenSIPS has vulnerability in the codec_delete_XX() functions 0.7%