Security
1 min read0 views
CVE-2026-116779: FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commands (Update: added to CISA KEV)
Update: added to CISA KEV. FreeSWITCH, the open-source telecom software, has a flaw in how it handles incoming SIP chat messages, letting an attacker run commands with the privileges of the FreeSWITCH process, including arbitrary operating system commands, read configuration and credentials, and take full control of calls. It can be reached remotely over the network without logging in, public…
Reading Level🟢Beginner
Listen to this article
Update: added to CISA KEV. FreeSWITCH, the open-source telecom software, has a flaw in how it handles incoming SIP chat messages, letting an attacker run commands with the privileges of the FreeSWITCH process, including arbitrary operating system commands, read configuration and credentials, and take full control of calls. It can be reached remotely over the network without logging in, public exploit code is available, a...
Original Source
cve.now CISA KEVLike this article
Share this article
Share:
Related Articles
CVE-2026-125350: Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a… (Update: added to CISA KEV)
1 min read·1h ago
CVE-2026-111560: OS Command Injection in Barracuda Appliances (Update: added to CISA KEV)
1 min read·1h ago
CVE-2026-116606: Authentication Bypass Allows Global Configuration Restore in Barracuda Email Security Gateway (Update: added to CISA KEV)
1 min read·1h ago