既知の脆弱性
| CVE | タイトル | 影響を受けるバージョン | CVSS | 悪用 | EPSS | 公開日 |
|---|---|---|---|---|---|---|
| CVE-2026-116779 | FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commands | * | 9.8 | KEV | 2.5% | 2026-11-06 |
| CVE-2026-116782 | FreeSWITCH: Pre-authentication invalid pointer dereference in mod_rtmp connect command handling | * | 7.5 | — | 2026-11-06 | |
| CVE-2026-116783 | FreeSWITCH mod_spandsp: out-of-bounds write parsing UDPTL error-recovery data | * | 8.2 | — | 2026-11-06 | |
| CVE-2026-116790 | FreeSWITCH: Inbound ICE connectivity checks are accepted without verifying STUN MESSAGE-INTEGRITY | * | 9.1 | — | 2026-11-06 | |
| CVE-2026-116788 | FreeSWITCH: Pre-authentication heap buffer overflow in core XML empty-entity decoding | * | 8.2 | — | 2026-11-06 | |
| CVE-2026-116780 | FreeSWITCH: Heap out-of-bounds read in FreeSWITCH core variable expansion via `${variable:offset}` slicing | * | 2.7 | — | 2026-11-06 | |
| CVE-2026-116784 | FreeSWITCH: Out-of-bounds read in RTCP NACK feedback parsing | * | 7.5 | — | 2026-11-06 | |
| CVE-2026-116789 | FreeSWITCH: DTLS-SRTP peer certificate is not bound to the SDP fingerprint when FreeSWITCH is the DTLS server | * | 7.4 | — | 2026-11-06 | |
| CVE-2026-116781 | FreeSWITCH: Pre-authentication out-of-bounds writes in mod_xml_rpc WebSocket frame parsing | * | 5.3 | — | 2026-11-06 | |
| CVE-2026-116785 | FreeSWITCH: Pre-authentication heap out-of-bounds write in mod_xml_rpc WebSocket frame length handling | * | 9.1 | — | 2026-11-06 | |
| CVE-2026-116786 | FreeSWITCH: Channel-variable injection via SIP REFER leads to command execution in mod_sofia | * | 8.8 | — | 2026-11-06 | |
| CVE-2026-116787 | FreeSWITCH: Pre-authentication process termination in the Event Socket via an unbounded Content-Length | * | 7.5 | — | 2026-11-06 | |
| CVE-2026-116567 | FreeSWITCH: Pre-authentication stack buffer overflow in mod_rtmp control-message handling | * | 7.5 | — | 2026-11-06 | |
| CVE-2026-116571 | FreeSWITCH: Stack buffer overflow in mod_rtmp AVC sequence-header construction | * | 5.9 | — | 2026-11-06 | |
| CVE-2026-116570 | FreeSWITCH: Pre-authentication stack buffer overflow in mod_xml_rpc HTTP directory authentication | * | 7.5 | — | 2026-11-06 | |
| CVE-2026-116569 | FreeSWITCH: Pre-authentication out-of-bounds write in MSRP message body parsing | * | 7.5 | — | 2026-11-06 | |
| CVE-2026-116568 | FreeSWITCH: Out-of-bounds read in mod_rtmp H.264 video message parsing | * | 7.5 | — | 2026-11-06 | |
| CVE-2026-116572 | FreeSWITCH mod_sofia: stack buffer overflow from an over-long SIP Contact display-name | * | 6.5 | — | 2026-11-06 | |
| CVE-2026-115928 | FreeSWITCH: Stack buffer overflow parsing the SDP a=crypto key material on inbound calls | * | 7.5 | — | 2026-11-06 | |
| CVE-2026-116574 | FreeSWITCH: Off-by-one heap write in core XML serialization of four-byte UTF-8 sequences | * | 5.9 | — | 2026-11-06 | |
| CVE-2026-116573 | FreeSWITCH mod_sofia: stack buffer overflow from an over-long SIP To-header user | * | 6.5 | — | 2026-11-06 | |
| CVE-2026-49848 | FreeSWITCH: Pre-authentication `userVariables` injection in `mod_verto` | * | 4.3 | — | 2026-06-10 | |
| CVE-2026-49847 | FreeSWITCH: Stack overflow in bundled cJSON parser via deeply nested JSON | * | 7.5 | — | 2026-06-10 | |
| CVE-2026-49843 | FreeSWITCH: Pre-authentication session eviction via attacker-chosen `sessid` in `mod_verto` | * | 5.3 | — | 2026-06-10 | |
| CVE-2026-49842 | FreeSWITCH: Pre-authentication bandwidth amplification via `mod_verto` speed-test frames | * | 7.5 | — | 2026-06-10 | |
| CVE-2026-49841 | FreeSWITCH: Pre-authentication heap buffer overflow in `mod_verto` HTTP POST body read | * | 9.8 | — | 2026-06-10 | |
| CVE-2026-49840 | FreeSWITCH: Pre-authentication heap buffer overflow in libesl `Content-Length` parsing | * | 9.1 | — | 2026-06-10 | |
| CVE-2026-49475 | FreeSWITCH: Out-of-bounds memory access in core STUN attribute parsing | * | 7.5 | — | 2026-06-10 | |
| CVE-2026-49472 | FreeSWITCH includes a vulnerable function, PREFIX(prologTok)() from libexpat | * | 5.3 | — | 2026-06-10 | |
| CVE-2026-45771 | Freeswitch Denial-of-Service in SIP PUBLISH Requests via XML Entity Expansion | * | 7.5 | — | 2026-06-10 | |
| CVE-2023-51443 | FreeSWITCH susceptible to Denial of Service via DTLS Hello packets during call initiation | * | 7.5 | — | 2023-12-28 | |
| CVE-2023-40019 | FreeSWITCH allows authorized users to cause a denial of service attack by sending re-INVITE with SDP containin... | * | 7.5 | — | 2023-09-16 | |
| CVE-2023-40018 | FreeSWITCH allows remote users to trigger out of bounds write by offering an ICE candidate with unknown compon... | * | 7.5 | — | 2023-09-16 | |
| CVE-2021-41158 | FreeSWITCH vulnerable to SIP digest leak for configured gateways | * | 5.8 | — | 2021-10-26 | |
| CVE-2021-41157 | FreeSWITCH does not authenticate SIP SUBSCRIBE requests by default | * | 5.3 | — | 2021-10-26 | |
| CVE-2021-41105 | FreeSWITCH susceptible to Denial of Service via invalid SRTP packets | * | 7.5 | — | 2021-10-26 | |
| CVE-2021-41145 | FreeSWITCH susceptible to Denial of Service via SIP flooding | * | 8.6 | — | 2021-10-26 | |
| CVE-2021-37624 | FreeSWITCH does not authenticate SIP MESSAGE requests, leading to spam and message spoofing | * | 7.5 | — | 2021-10-26 | |
| CVE-2021-36513 | An issue was discovered in function sofia_handle_sip_i_notify in sofia.c in SignalWire freeswitch before 1.10.... | * | — | — | 2021-10-19 |
データ：CVE List（CVE® Program）、NVD、CISA KEV、FIRST EPSS（EPSS については https://www.first.org/epss を参照）、endoflife.date。ソフトウェア一覧：awesome-selfhosted（CC BY-SA 3.0）。