Vulnerabilities in signalwire
39 resultsCVE-2026-49842HIGHFreeSWITCH: Pre-authentication bandwidth amplification via `mod_verto` speed-test framesEPSS 0.4%CVE-2026-116784HIGHFreeSWITCH: Out-of-bounds read in RTCP NACK feedback parsingEPSS 0.4%CVE-2026-116786HIGHFreeSWITCH: Channel-variable injection via SIP REFER leads to command execution in mod_sofiaEPSS 0.4%CVE-2026-116567HIGHFreeSWITCH: Pre-authentication stack buffer overflow in mod_rtmp control-message handlingEPSS 0.4%CVE-2026-49847HIGHFreeSWITCH: Stack overflow in bundled cJSON parser via deeply nested JSONEPSS 0.4%CVE-2026-116788HIGHFreeSWITCH: Pre-authentication heap buffer overflow in core XML empty-entity decodingEPSS 0.4%CVE-2026-49841CRITICALFreeSWITCH: Pre-authentication heap buffer overflow in `mod_verto` HTTP POST body readEPSS 0.4%CVE-2026-116574MEDIUMFreeSWITCH: Off-by-one heap write in core XML serialization of four-byte UTF-8 sequencesEPSS 0.4%CVE-2026-116571MEDIUMFreeSWITCH: Stack buffer overflow in mod_rtmp AVC sequence-header constructionEPSS 0.4%CVE-2026-45771HIGHFreeswitch Denial-of-Service in SIP PUBLISH Requests via XML Entity ExpansionEPSS 0.3%CVE-2026-116790CRITICALFreeSWITCH: Inbound ICE connectivity checks are accepted without verifying STUN MESSAGE-INTEGRITYEPSS 0.3%CVE-2026-49840CRITICALFreeSWITCH: Pre-authentication heap buffer overflow in libesl `Content-Length` parsingEPSS 0.3%CVE-2026-49843MEDIUMFreeSWITCH: Pre-authentication session eviction via attacker-chosen `sessid` in `mod_verto`EPSS 0.3%CVE-2026-49475HIGHFreeSWITCH: Out-of-bounds memory access in core STUN attribute parsingEPSS 0.3%CVE-2026-116781MEDIUMFreeSWITCH: Pre-authentication out-of-bounds writes in mod_xml_rpc WebSocket frame parsingEPSS 0.3%CVE-2026-116780LOWFreeSWITCH: Heap out-of-bounds read in FreeSWITCH core variable expansion via `${variable:offset}` slicingEPSS 0.2%CVE-2026-49472MEDIUMFreeSWITCH includes a vulnerable function, PREFIX(prologTok)() from libexpatEPSS 0.2%CVE-2026-116789HIGHFreeSWITCH: DTLS-SRTP peer certificate is not bound to the SDP fingerprint when FreeSWITCH is the DTLS serverEPSS 0.2%CVE-2026-49848MEDIUMFreeSWITCH: Pre-authentication `userVariables` injection in `mod_verto`EPSS 0.2%