# cve.now: SignalWire

The newest entries naming SignalWire as an affected vendor (up to 200), of 39 in all, 1 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-116782](https://cve.now/CVE-2026-116782.md): FreeSWITCH: Pre-authentication invalid pointer dereference in mod\_rtmp connect command handling (CVSS 7.5)
- [CVE-2026-116783](https://cve.now/CVE-2026-116783.md): FreeSWITCH mod\_spandsp: out-of-bounds write parsing UDPTL error-recovery data (CVSS 8.2)
- [CVE-2026-116790](https://cve.now/CVE-2026-116790.md): FreeSWITCH: Inbound ICE connectivity checks are accepted without verifying STUN MESSAGE-INTEGRITY (CVSS 9.1)
- [CVE-2026-116788](https://cve.now/CVE-2026-116788.md): FreeSWITCH: Pre-authentication heap buffer overflow in core XML empty-entity decoding (CVSS 8.2)
- [CVE-2026-116780](https://cve.now/CVE-2026-116780.md): FreeSWITCH: Heap out-of-bounds read in FreeSWITCH core variable expansion via \`${variable:offset}\` slicing (CVSS 2.7)
- [CVE-2026-116784](https://cve.now/CVE-2026-116784.md): FreeSWITCH: Out-of-bounds read in RTCP NACK feedback parsing (CVSS 7.5)
- [CVE-2026-116779](https://cve.now/CVE-2026-116779.md): FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commands (CVSS 9.8, KEV)
- [CVE-2026-116789](https://cve.now/CVE-2026-116789.md): FreeSWITCH: DTLS-SRTP peer certificate is not bound to the SDP fingerprint when FreeSWITCH is the DTLS server (CVSS 7.4)
- [CVE-2026-116781](https://cve.now/CVE-2026-116781.md): FreeSWITCH: Pre-authentication out-of-bounds writes in mod\_xml\_rpc WebSocket frame parsing (CVSS 5.3)
- [CVE-2026-116785](https://cve.now/CVE-2026-116785.md): FreeSWITCH: Pre-authentication heap out-of-bounds write in mod\_xml\_rpc WebSocket frame length handling (CVSS 9.1)
- [CVE-2026-116786](https://cve.now/CVE-2026-116786.md): FreeSWITCH: Channel-variable injection via SIP REFER leads to command execution in mod\_sofia (CVSS 8.8)
- [CVE-2026-116787](https://cve.now/CVE-2026-116787.md): FreeSWITCH: Pre-authentication process termination in the Event Socket via an unbounded Content-Length (CVSS 7.5)
- [CVE-2026-116567](https://cve.now/CVE-2026-116567.md): FreeSWITCH: Pre-authentication stack buffer overflow in mod\_rtmp control-message handling (CVSS 7.5)
- [CVE-2026-116571](https://cve.now/CVE-2026-116571.md): FreeSWITCH: Stack buffer overflow in mod\_rtmp AVC sequence-header construction (CVSS 5.9)
- [CVE-2026-116570](https://cve.now/CVE-2026-116570.md): FreeSWITCH: Pre-authentication stack buffer overflow in mod\_xml\_rpc HTTP directory authentication (CVSS 7.5)
- [CVE-2026-116569](https://cve.now/CVE-2026-116569.md): FreeSWITCH: Pre-authentication out-of-bounds write in MSRP message body parsing (CVSS 7.5)
- [CVE-2026-116568](https://cve.now/CVE-2026-116568.md): FreeSWITCH: Out-of-bounds read in mod\_rtmp H.264 video message parsing (CVSS 7.5)
- [CVE-2026-116572](https://cve.now/CVE-2026-116572.md): FreeSWITCH mod\_sofia: stack buffer overflow from an over-long SIP Contact display-name (CVSS 6.5)
- [CVE-2026-115928](https://cve.now/CVE-2026-115928.md): FreeSWITCH: Stack buffer overflow parsing the SDP a=crypto key material on inbound calls (CVSS 7.5)
- [CVE-2026-116574](https://cve.now/CVE-2026-116574.md): FreeSWITCH: Off-by-one heap write in core XML serialization of four-byte UTF-8 sequences (CVSS 5.9)
- [CVE-2026-116573](https://cve.now/CVE-2026-116573.md): FreeSWITCH mod\_sofia: stack buffer overflow from an over-long SIP To-header user (CVSS 6.5)
- [CVE-2026-49846](https://cve.now/CVE-2026-49846.md): libks has path traversal in kws HTTP parser via URI segment overflow (CVSS 7.5)
- [CVE-2026-49848](https://cve.now/CVE-2026-49848.md): FreeSWITCH: Pre-authentication \`userVariables\` injection in \`mod\_verto\` (CVSS 4.3)
- [CVE-2026-49847](https://cve.now/CVE-2026-49847.md): FreeSWITCH: Stack overflow in bundled cJSON parser via deeply nested JSON (CVSS 7.5)
- [CVE-2026-49843](https://cve.now/CVE-2026-49843.md): FreeSWITCH: Pre-authentication session eviction via attacker-chosen \`sessid\` in \`mod\_verto\` (CVSS 5.3)
- [CVE-2026-49842](https://cve.now/CVE-2026-49842.md): FreeSWITCH: Pre-authentication bandwidth amplification via \`mod\_verto\` speed-test frames (CVSS 7.5)
- [CVE-2026-49841](https://cve.now/CVE-2026-49841.md): FreeSWITCH: Pre-authentication heap buffer overflow in \`mod\_verto\` HTTP POST body read (CVSS 9.8)
- [CVE-2026-49840](https://cve.now/CVE-2026-49840.md): FreeSWITCH: Pre-authentication heap buffer overflow in libesl \`Content-Length\` parsing (CVSS 9.1)
- [CVE-2026-49475](https://cve.now/CVE-2026-49475.md): FreeSWITCH: Out-of-bounds memory access in core STUN attribute parsing (CVSS 7.5)
- [CVE-2026-49472](https://cve.now/CVE-2026-49472.md): FreeSWITCH includes a vulnerable function, PREFIX(prologTok)() from libexpat (CVSS 5.3)
- [CVE-2026-45771](https://cve.now/CVE-2026-45771.md): Freeswitch Denial-of-Service in SIP PUBLISH Requests via XML Entity Expansion (CVSS 7.5)
- [CVE-2023-51443](https://cve.now/CVE-2023-51443.md): FreeSWITCH susceptible to Denial of Service via DTLS Hello packets during call initiation (CVSS 7.5)
- [CVE-2023-40019](https://cve.now/CVE-2023-40019.md): FreeSWITCH allows authorized users to cause a denial of service attack by sending re-INVITE with SDP containing duplicate codec names (CVSS 7.5)
- [CVE-2023-40018](https://cve.now/CVE-2023-40018.md): FreeSWITCH allows remote users to trigger out of bounds write by offering an ICE candidate with unknown component ID (CVSS 7.5)
- [CVE-2021-41158](https://cve.now/CVE-2021-41158.md): FreeSWITCH vulnerable to SIP digest leak for configured gateways (CVSS 5.8)
- [CVE-2021-41157](https://cve.now/CVE-2021-41157.md): FreeSWITCH does not authenticate SIP SUBSCRIBE requests by default (CVSS 5.3)
- [CVE-2021-41105](https://cve.now/CVE-2021-41105.md): FreeSWITCH susceptible to Denial of Service via invalid SRTP packets (CVSS 7.5)
- [CVE-2021-41145](https://cve.now/CVE-2021-41145.md): FreeSWITCH susceptible to Denial of Service via SIP flooding (CVSS 8.6)
- [CVE-2021-37624](https://cve.now/CVE-2021-37624.md): FreeSWITCH does not authenticate SIP MESSAGE requests, leading to spam and message spoofing (CVSS 7.5)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/signalwire
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.