Read the docs
TI-2026-09134 Aliases CVE-2026-10629GHSA-8pfq-65f4-r264

SIP signaling stack in Verizon IMS (unspecified version) implements SIP signaling without…

Priority LOW 34Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
High · High · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.

Summary

SIP signaling stack in Verizon IMS (unspecified version) implements SIP signaling without IPsec integrity protection (missing Security-Client/Security-Server headers and ESP traffic), which allows an on-path attacker to compromise confidentiality, integrity, and authenticity of VoLTE signaling via passive monitoring and active manipulation of unsecured SIP messages over the radio and core network.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00236 14th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
VerizonVoLTEUNKNOWN—No fix listedCNA
  • VoLTE VendorVerizon Affected UNKNOWN Fixed in — No fix listed CNA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-10629
  2. 2026-10-03 Alias added: GHSA-8pfq-65f4-r264

References

Other 1

  • TI-2026-60344 Verizon Cloud for Android < 26.7.10 Path Traversal via OneTouchUploadActivity CVSS 4.0MEDIUM 6.9
  • TI-2019-02920 OS command injection in Verizon Fios Quantum Gateway CVSS 3.0HIGH 7.2
  • TI-2022-11129 Verizon 5G Home LVSKIHP OutDoorUnit (ODU) 3.33.101.0 does not property sanitize… CVSS 3.1CRITICAL 9.8
  • TI-2022-11127 Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 does not properly sanitize… CVSS 3.1CRITICAL 9.8
  • TI-2022-11123 Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 does not validate the user-provided… CVSS 3.1CRITICAL 9.8
  • TI-2022-11128 Verizon 5G Home LVSKIHP OutDoorUnit (ODU) 3.33.101.0 does not property sanitize… CVSS 3.1HIGH 8.8
See all 21 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences