Vulnerabilities

TI-2026-85628 CVE-2026-116782

Invalid pointer dereference in FreeSWITCH mod_rtmp connect handling

MEDIUM 40

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00536 Published 2026-11-05 Fixed in 1.11.2 CWE-125

TI-2026-85629 CVE-2026-116783

Out-of-bounds write in FreeSWITCH mod_spandsp UDPTL parsing

LOW 37

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00618 Published 2026-11-05 Fixed in 1.11.2 CWE-129

TI-2026-85631 CVE-2026-116790

FreeSWITCH ICE checks lack STUN integrity validation, enabling media hijack

LOW 39

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00341 Published 2026-11-05 Fixed in 1.11.2 CWE-290

TI-2026-85630 CVE-2026-116788

Heap buffer overflow in FreeSWITCH XML entity decoding

LOW 36

FreeSWITCH is an open-source software telecommunications platform.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00409 Published 2026-11-05 Fixed in 1.11.2 CWE-122

TI-2026-85618 CVE-2026-116780

Heap out-of-bounds read in FreeSWITCH variable expansion

LOW 13

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00225 Published 2026-11-05 Fixed in 1.11.2 CWE-125

TI-2026-85620 CVE-2026-116784

Out-of-bounds read in FreeSWITCH RTCP NACK feedback parsing

LOW 33

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00446 Published 2026-11-05 Fixed in 1.11.2 CWE-125

TI-2026-85617 CVE-2026-116779

Inbound SIP MESSAGE lets peers run FreeSWITCH API commands

MEDIUM 51

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01299 Published 2026-11-05 Fixed in 1.11.3 CWE-749

TI-2026-85624 CVE-2026-116789

FreeSWITCH skips DTLS-SRTP certificate check when acting as server

LOW 32

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00179 Published 2026-11-05 Fixed in 1.11.2 CWE-295

TI-2026-85619 CVE-2026-116781

Out-of-bounds writes in FreeSWITCH WebSocket frame parsing

LOW 24

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00265 Published 2026-11-05 Fixed in 1.11.2 CWE-193

TI-2026-85621 CVE-2026-116785

Heap out-of-bounds write in FreeSWITCH mod_xml_rpc WebSocket handling

MEDIUM 41

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01031 Published 2026-11-05 Fixed in 1.11.2 CWE-122

TI-2026-85622 CVE-2026-116786

Channel variable injection via SIP REFER in FreeSWITCH allows command execution

LOW 38

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00442 Published 2026-11-05 Fixed in 1.11.2 CWE-77

TI-2026-85623 CVE-2026-116787

Pre-authentication process termination in FreeSWITCH Event Socket

LOW 39

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00479 Published 2026-11-05 Fixed in 1.11.2 CWE-190

TI-2026-85611 CVE-2026-116567

Pre-authentication stack overflow in FreeSWITCH mod_rtmp

LOW 33

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00432 Published 2026-11-05 Fixed in 1.11.2 CWE-121

TI-2026-85615 CVE-2026-116571

Stack buffer overflow in FreeSWITCH mod_rtmp AVC sequence-header construction

LOW 27

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00373 Published 2026-11-05 Fixed in 1.11.2 CWE-121

TI-2026-85614 CVE-2026-116570

Stack buffer overflow in FreeSWITCH mod_xml_rpc HTTP authentication

LOW 34

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00553 Published 2026-11-05 Fixed in 1.11.2 CWE-121

TI-2026-85613 CVE-2026-116569

Out-of-bounds write in FreeSWITCH MSRP message parsing

LOW 34

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00631 Published 2026-11-05 Fixed in 1.11.2 CWE-191

TI-2026-85612 CVE-2026-116568

Out-of-bounds read in FreeSWITCH mod_rtmp H.264 video parsing

LOW 39

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00527 Published 2026-11-05 Fixed in 1.11.2 CWE-125

TI-2026-85616 CVE-2026-116572

Stack buffer overflow in FreeSWITCH mod_sofia from long SIP display names

LOW 29

FreeSWITCH is an open-source software telecommunications platform.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00459 Published 2026-11-05 Fixed in 1.11.2 CWE-121

TI-2026-85610 CVE-2026-115928

Stack buffer overflow in FreeSWITCH SDP crypto parsing

LOW 34

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00705 Published 2026-11-05 Fixed in 1.11.2 CWE-121

TI-2026-85604 CVE-2026-116574

Off-by-one heap write in FreeSWITCH XML serialization

LOW 27

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1MEDIUM 5.9 Network Low privileges No interaction EPSS 0.00379 Published 2026-11-05 Fixed in 1.11.2 CWE-193

TI-2026-85603 CVE-2026-116573

Stack buffer overflow in FreeSWITCH mod_sofia from long SIP To-header

LOW 29

FreeSWITCH is an open-source software telecommunications platform.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00459 Published 2026-11-05 Fixed in 1.11.2 CWE-121

TI-2026-36750 CVE-2026-49846

libks has path traversal in kws HTTP parser via URI segment overflow

LOW 39

libks provides foundational support for signalwire C products.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00503 Published 2026-09-11 Fixed in 2.0.11 CWE-22

TI-2026-36752 CVE-2026-49848

FreeSWITCH: Pre-authentication `userVariables` injection in `mod_verto`

LOW 19

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00172 Published 2026-06-09 Fixed in 1.11.1 CWE-287

TI-2026-36751 CVE-2026-49847

FreeSWITCH: Stack overflow in bundled cJSON parser via deeply nested JSON

LOW 39

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00414 Published 2026-06-09 Fixed in 1.11.1 CWE-674

TI-2026-36747 CVE-2026-49843

FreeSWITCH: Pre-authentication session eviction via attacker-chosen `sessid` in `mod_verto`

LOW 30

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00284 Published 2026-06-09 Fixed in 1.11.1 CWE-287

Vulnerabilities

Filters