FR
Product
freeswitch
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 3Low 0
Watch
Add freeswitch to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-49841 | 9.8 | Jun 9 | FreeSWITCH: Pre-authentication heap buffer overflow in `mod_verto` HTTP POST body read Affected: < 1.11.1 |
| CVE-2026-49840 | 9.1 | Jun 9 | FreeSWITCH: Pre-authentication heap buffer overflow in libesl `Content-Length` parsing Affected: < 1.11.1 |
| CVE-2026-49847 | 7.5 | Jun 9 | FreeSWITCH: Stack overflow in bundled cJSON parser via deeply nested JSON Affected: < 1.11.1 |
| CVE-2026-49842 | 7.5 | Jun 9 | FreeSWITCH: Pre-authentication bandwidth amplification via `mod_verto` speed-test frames Affected: < 1.11.1 |
| CVE-2026-49475 | 7.5 | Jun 9 | FreeSWITCH: Out-of-bounds memory access in core STUN attribute parsing Affected: < 1.11.0 |
| CVE-2026-45771 | 7.5 | Jun 9 | Freeswitch Denial-of-Service in SIP PUBLISH Requests via XML Entity Expansion Affected: < 1.11.0 |
| CVE-2021-36513 | 7.5 | Oct 18 | An issue was discovered in function sofia_handle_sip_i_notify in sofia.c in SignalWire freeswitch before 1.10.6, may allow attackers to view sensitive information due to an… Affected: before 1.10.6 |
| CVE-2026-49843 | 5.3 | Jun 9 | FreeSWITCH: Pre-authentication session eviction via attacker-chosen `sessid` in `mod_verto` Affected: < 1.11.1 |
| CVE-2026-49472 | 5.3 | Jun 9 | FreeSWITCH includes a vulnerable function, PREFIX(prologTok)() from libexpat Affected: < 1.11.0 |
| CVE-2026-49848 | 4.3 | Jun 9 | FreeSWITCH: Pre-authentication `userVariables` injection in `mod_verto` Affected: < 1.11.1 |
Showing 10