SignalWire vulnerabilities
39 CVEs and advisories name SignalWire as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-45771Freeswitch Denial-of-Service in SIP PUBLISH Requests via XML Entity Expansion
- CVE-2023-51443FreeSWITCH susceptible to Denial of Service via DTLS Hello packets during call initiation
- CVE-2023-40019FreeSWITCH allows authorized users to cause a denial of service attack by sending re-INVITE with SDP containing duplicate codec names
- CVE-2023-40018FreeSWITCH allows remote users to trigger out of bounds write by offering an ICE candidate with unknown component ID
- CVE-2021-41158FreeSWITCH vulnerable to SIP digest leak for configured gateways
- CVE-2021-41157FreeSWITCH does not authenticate SIP SUBSCRIBE requests by default
- CVE-2021-41105FreeSWITCH susceptible to Denial of Service via invalid SRTP packets
- CVE-2021-41145FreeSWITCH susceptible to Denial of Service via SIP flooding
- CVE-2021-37624FreeSWITCH does not authenticate SIP MESSAGE requests, leading to spam and message spoofing