CVE-2026-36670

CVE-2026-36670 describes a time-based blind SQL injection in the OpenSIPS Control Panel (opensips-cp) alias_management module. In versions prior to 9.3.3, an authenticated user can craft SQL via the GET parameter table in alias_management.php, allowing execution of arbitrary SQL commands. The ava...