Linux Distros Unpatched Vulnerability : CVE-2026-42225

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, on GnuTLS builds, the SIP TLS transport siptransporttls ca...

CVE-2026-42225

creationtimestamp| type| source ---|---|--- 2026-05-07 23:00:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlccz54qx72k 2026-07-09 06:01:50+00:00| seen| https://bsky.app/profile/kotosecurity.bsky.social/post/3mq6xi3midu22...

CVE-2026-42225

PJSIP’s GnuTLS-enabled SIP TLS transport (sip_transport_tls) in builds prior to version 2.17 can accept connections with invalid/untrusted certificates even when verify_server/verify_client are PJ_TRUE. The vulnerability arises from certificate verification being effectively skipped for those bui...