Ssignalwire

Products

Exploited and recent CVEs

• CVE-2026-116782 High 7.5 FreeSWITCH: Pre-authentication invalid pointer dereference in mod_rtmp connect command handling 0.5%
• CVE-2026-116783 High 8.2 FreeSWITCH mod_spandsp: out-of-bounds write parsing UDPTL error-recovery data 0.6%
• CVE-2026-116790 Critical 9.1 FreeSWITCH: Inbound ICE connectivity checks are accepted without verifying STUN MESSAGE-INTEGRITY 0.3%
• CVE-2026-116788 High 8.2 FreeSWITCH: Pre-authentication heap buffer overflow in core XML empty-entity decoding 0.4%
• CVE-2026-116780 Low 2.7 FreeSWITCH: Heap out-of-bounds read in FreeSWITCH core variable expansion via `${variable:offset}` slicing 0.2%
• CVE-2026-116784 High 7.5 FreeSWITCH: Out-of-bounds read in RTCP NACK feedback parsing 0.4%
• CVE-2026-116779 Critical 9.8 FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commands 1.3%
• CVE-2026-116789 High 7.4 FreeSWITCH: DTLS-SRTP peer certificate is not bound to the SDP fingerprint when FreeSWITCH is the DTLS server 0.2%
• CVE-2026-116781 Medium 5.3 FreeSWITCH: Pre-authentication out-of-bounds writes in mod_xml_rpc WebSocket frame parsing 0.3%
• CVE-2026-116785 Critical 9.1 FreeSWITCH: Pre-authentication heap out-of-bounds write in mod_xml_rpc WebSocket frame length handling 1.0%
• CVE-2026-116786 High 8.8 FreeSWITCH: Channel-variable injection via SIP REFER leads to command execution in mod_sofia 0.4%
• CVE-2026-116787 High 7.5 FreeSWITCH: Pre-authentication process termination in the Event Socket via an unbounded Content-Length 0.5%
• CVE-2026-116567 High 7.5 FreeSWITCH: Pre-authentication stack buffer overflow in mod_rtmp control-message handling 0.4%
• CVE-2026-116571 Medium 5.9 FreeSWITCH: Stack buffer overflow in mod_rtmp AVC sequence-header construction 0.4%
• CVE-2026-116570 High 7.5 FreeSWITCH: Pre-authentication stack buffer overflow in mod_xml_rpc HTTP directory authentication 0.6%
• CVE-2026-116569 High 7.5 FreeSWITCH: Pre-authentication out-of-bounds write in MSRP message body parsing 0.6%
• CVE-2026-116568 High 7.5 FreeSWITCH: Out-of-bounds read in mod_rtmp H.264 video message parsing 0.5%
• CVE-2026-116572 Medium 6.5 FreeSWITCH mod_sofia: stack buffer overflow from an over-long SIP Contact display-name 0.5%
• CVE-2026-115928 High 7.5 FreeSWITCH: Stack buffer overflow parsing the SDP a=crypto key material on inbound calls 0.7%
• CVE-2026-116574 Medium 5.9 FreeSWITCH: Off-by-one heap write in core XML serialization of four-byte UTF-8 sequences 0.4%
• CVE-2026-116573 Medium 6.5 FreeSWITCH mod_sofia: stack buffer overflow from an over-long SIP To-header user 0.5%
• CVE-2026-49846 High 7.5 libks has path traversal in kws HTTP parser via URI segment overflow 0.5%
• CVE-2026-49848 Medium 4.3 FreeSWITCH: Pre-authentication `userVariables` injection in `mod_verto` 0.2%
• CVE-2026-49847 High 7.5 FreeSWITCH: Stack overflow in bundled cJSON parser via deeply nested JSON 0.4%
• CVE-2026-49843 Medium 5.3 FreeSWITCH: Pre-authentication session eviction via attacker-chosen `sessid` in `mod_verto` 0.3%
• CVE-2026-49842 High 7.5 FreeSWITCH: Pre-authentication bandwidth amplification via `mod_verto` speed-test frames 0.4%
• CVE-2026-49841 Critical 9.8 FreeSWITCH: Pre-authentication heap buffer overflow in `mod_verto` HTTP POST body read 0.4%
• CVE-2026-49840 Critical 9.1 FreeSWITCH: Pre-authentication heap buffer overflow in libesl `Content-Length` parsing 0.3%
• CVE-2026-49475 High 7.5 FreeSWITCH: Out-of-bounds memory access in core STUN attribute parsing 0.3%
• CVE-2026-49472 Medium 5.3 FreeSWITCH includes a vulnerable function, PREFIX(prologTok)() from libexpat 0.2%