signalwire freeswitch vulnerabilities and fixes
Exploited and high-severity signalwire freeswitch vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.
- 7.5CVE-2026-116782FreeSWITCH: Pre-authentication invalid pointer dereference in mod_rtmp connect command handlingVerify fixsignalwire freeswitch
1 min read - 7.5CVE-2026-116784FreeSWITCH: Out-of-bounds read in RTCP NACK feedback parsingVerify fixsignalwire freeswitch
1 min read - 7.5CVE-2026-116569FreeSWITCH: Pre-authentication out-of-bounds write in MSRP message body parsingRCEVerify fixsignalwire freeswitch
1 min read - 7.5CVE-2026-116570FreeSWITCH: Pre-authentication stack buffer overflow in mod_xml_rpc HTTP directory authenticationRCEVerify fixsignalwire freeswitch
1 min read - 9.8CVE-2026-116779FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commandsVerify fixsignalwire freeswitch
1 min read - 7.5CVE-2026-116567FreeSWITCH: Pre-authentication stack buffer overflow in mod_rtmp control-message handlingVerify fixsignalwire freeswitch
1 min read - 7.5CVE-2026-116568FreeSWITCH: Out-of-bounds read in mod_rtmp H.264 video message parsingVerify fixsignalwire freeswitch
1 min read - 8.2CVE-2026-116783FreeSWITCH mod_spandsp: out-of-bounds write parsing UDPTL error-recovery dataRCEVerify fixsignalwire freeswitch
1 min read - 9.1CVE-2026-116790FreeSWITCH: Inbound ICE connectivity checks are accepted without verifying STUN MESSAGE-INTEGRITYVerify fixsignalwire freeswitch
1 min read - 8.2CVE-2026-116788FreeSWITCH: Pre-authentication heap buffer overflow in core XML empty-entity decodingVerify fixsignalwire freeswitch
1 min read - 7.4CVE-2026-116789FreeSWITCH: DTLS-SRTP peer certificate is not bound to the SDP fingerprint when FreeSWITCH is the DTLS serverVerify fixsignalwire freeswitch
1 min read - 9.1CVE-2026-116785FreeSWITCH: Pre-authentication heap out-of-bounds write in mod_xml_rpc WebSocket frame length handlingRCEVerify fixsignalwire freeswitch
1 min read - 8.8CVE-2026-116786FreeSWITCH: Channel-variable injection via SIP REFER leads to command execution in mod_sofiaVerify fixsignalwire freeswitch
1 min read - 7.5CVE-2026-116787FreeSWITCH: Pre-authentication process termination in the Event Socket via an unbounded Content-LengthVerify fixsignalwire freeswitch
1 min read - 7.5CVE-2026-115928FreeSWITCH: Stack buffer overflow parsing the SDP a=crypto key material on inbound callsRCEVerify fixsignalwire freeswitch
1 min read