SignalWire vulnerabilities
39 CVEs and advisories name SignalWire as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-116782FreeSWITCH: Pre-authentication invalid pointer dereference in mod_rtmp connect command handling
- CVE-2026-116783FreeSWITCH mod_spandsp: out-of-bounds write parsing UDPTL error-recovery data
- CVE-2026-116790FreeSWITCH: Inbound ICE connectivity checks are accepted without verifying STUN MESSAGE-INTEGRITY
- CVE-2026-116788FreeSWITCH: Pre-authentication heap buffer overflow in core XML empty-entity decoding
- CVE-2026-116780FreeSWITCH: Heap out-of-bounds read in FreeSWITCH core variable expansion via `${variable:offset}` slicing
- CVE-2026-116784FreeSWITCH: Out-of-bounds read in RTCP NACK feedback parsing
- CVE-2026-116779FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commands
- CVE-2026-116789FreeSWITCH: DTLS-SRTP peer certificate is not bound to the SDP fingerprint when FreeSWITCH is the DTLS server
- CVE-2026-116781FreeSWITCH: Pre-authentication out-of-bounds writes in mod_xml_rpc WebSocket frame parsing
- CVE-2026-116785FreeSWITCH: Pre-authentication heap out-of-bounds write in mod_xml_rpc WebSocket frame length handling
- CVE-2026-116786FreeSWITCH: Channel-variable injection via SIP REFER leads to command execution in mod_sofia
- CVE-2026-116787FreeSWITCH: Pre-authentication process termination in the Event Socket via an unbounded Content-Length
- CVE-2026-116567FreeSWITCH: Pre-authentication stack buffer overflow in mod_rtmp control-message handling
- CVE-2026-116571FreeSWITCH: Stack buffer overflow in mod_rtmp AVC sequence-header construction
- CVE-2026-116570FreeSWITCH: Pre-authentication stack buffer overflow in mod_xml_rpc HTTP directory authentication
- CVE-2026-116569FreeSWITCH: Pre-authentication out-of-bounds write in MSRP message body parsing
- CVE-2026-116568FreeSWITCH: Out-of-bounds read in mod_rtmp H.264 video message parsing
- CVE-2026-116572FreeSWITCH mod_sofia: stack buffer overflow from an over-long SIP Contact display-name
- CVE-2026-115928FreeSWITCH: Stack buffer overflow parsing the SDP a=crypto key material on inbound calls
- CVE-2026-116574FreeSWITCH: Off-by-one heap write in core XML serialization of four-byte UTF-8 sequences
- CVE-2026-116573FreeSWITCH mod_sofia: stack buffer overflow from an over-long SIP To-header user
- CVE-2026-49846libks has path traversal in kws HTTP parser via URI segment overflow
- CVE-2026-49848FreeSWITCH: Pre-authentication `userVariables` injection in `mod_verto`
- CVE-2026-49847FreeSWITCH: Stack overflow in bundled cJSON parser via deeply nested JSON
- CVE-2026-49843FreeSWITCH: Pre-authentication session eviction via attacker-chosen `sessid` in `mod_verto`
- CVE-2026-49842FreeSWITCH: Pre-authentication bandwidth amplification via `mod_verto` speed-test frames
- CVE-2026-49841FreeSWITCH: Pre-authentication heap buffer overflow in `mod_verto` HTTP POST body read
- CVE-2026-49840FreeSWITCH: Pre-authentication heap buffer overflow in libesl `Content-Length` parsing
- CVE-2026-49475FreeSWITCH: Out-of-bounds memory access in core STUN attribute parsing
- CVE-2026-49472FreeSWITCH includes a vulnerable function, PREFIX(prologTok)() from libexpat