SI
Vendor
signalwire
16
CVEs
0
On KEV
0
New 30D
Products
FR9.8
freeswitch
signalwire
10 CVEs0 on KEV0 new
SO9.8
Sofia-sip
Signalwire
5 CVEs0 on KEV0 new
LI7.5
libks
signalwire
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-49846 | LI libks signalwire | 7.5 | Sep 11 | libks has path traversal in kws HTTP parser via URI segment overflow |
| CVE-2026-49848 | FR freeswitch signalwire | 4.3 | Jun 9 | FreeSWITCH: Pre-authentication `userVariables` injection in `mod_verto` |
| CVE-2026-49847 | FR freeswitch signalwire | 7.5 | Jun 9 | FreeSWITCH: Stack overflow in bundled cJSON parser via deeply nested JSON |
| CVE-2026-49843 | FR freeswitch signalwire | 5.3 | Jun 9 | FreeSWITCH: Pre-authentication session eviction via attacker-chosen `sessid` in `mod_verto` |
| CVE-2026-49842 | FR freeswitch signalwire | 7.5 | Jun 9 | FreeSWITCH: Pre-authentication bandwidth amplification via `mod_verto` speed-test frames |
| CVE-2026-49841 | FR freeswitch signalwire | 9.8 | Jun 9 | FreeSWITCH: Pre-authentication heap buffer overflow in `mod_verto` HTTP POST body read |
| CVE-2026-49840 | FR freeswitch signalwire | 9.1 | Jun 9 | FreeSWITCH: Pre-authentication heap buffer overflow in libesl `Content-Length` parsing |
| CVE-2026-49475 | FR freeswitch signalwire | 7.5 | Jun 9 | FreeSWITCH: Out-of-bounds memory access in core STUN attribute parsing |
| CVE-2026-49472 | FR freeswitch signalwire | 5.3 | Jun 9 | FreeSWITCH includes a vulnerable function, PREFIX(prologTok)() from libexpat |
| CVE-2026-45771 | FR freeswitch signalwire | 7.5 | Jun 9 | Freeswitch Denial-of-Service in SIP PUBLISH Requests via XML Entity Expansion |
| CVE-2023-32307 | SO Sofia-sip Signalwire | 7.5 | May 26 | Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification |
| CVE-2023-22741 | SO Sofia-sip Signalwire | 9.8 | Jan 19 | Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification |
| CVE-2022-31003 | SO Sofia-sip Signalwire | 9.8 | May 31 | Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library |
| CVE-2022-31001 | SO Sofia-sip Signalwire | 7.5 | May 31 | Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library |
| CVE-2022-31002 | SO Sofia-sip Signalwire | 7.5 | May 31 | Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library |
| CVE-2021-36513 | FR Freeswitch Signalwire | 7.5 | Oct 18 | An issue was discovered in function sofia_handle_sip_i_notify in sofia.c in SignalWire freeswitch before 1.10.6, may allow attackers to view sensitive information due to an… |