PT-2026-67736

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Information disclosure occurs when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling. SIP Session Initiation Protocol is used...

CVE-2026-45538: Stack-based Buffer Overflow

OpenSIPS is a Session Initiation Protocol SIP server implementation. In versions 4.0.0 and prior, processing a SIP message with a header name longer than 255 bytes causes a stack buffer overflow when siptojson is called in the routing script. Function siptojson modules/sipmsgops/sipmsgops.c copie...

CVE-2026-45100: Buffer Copy without Checking Size of Input

OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions 3.4.0-beta through 3.6.5 and 4.0.0-beta contain a buffer overflow in the s.b64encode string transformation. The size check for s.b64encode only verifies that the input fits within the 64 KB transformation buffer, but...

PT-2026-67879

Name of the Vulnerable Software and Affected Versions OpenSIPS versions 3.4.0-beta through 3.6.5 OpenSIPS version 4.0.0-beta Description A buffer overflow exists in the s.b64encode string transformation. The size check only verifies that the input fits within the 64 KB transformation buffer,...

PT-2026-67880

Name of the Vulnerable Software and Affected Versions OpenSIPS versions prior to 3.6.6 OpenSIPS versions prior to 4.0.0-rc1 Description The TCP message framing layer parses the Content-Length header using unsigned int arithmetic without overflow checks. An unauthenticated, network-based attacker...

CVE-2026-45103: Integer Overflow or Wraparound

OpenSIPS is a Session Initiation Protocol SIP server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the TCP message framing layer parses the Content-Length header using unsigned int arithmetic with no overflow check. When an attacker sends a Content-Length value that overflows unsigned...

CVE-2026-45084: NULL Pointer Dereference

OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions 3.4.0 through 3.6.5 contain a denial of service vulnerability in the presence module. When the presence module's handlepublish function processes a SIP PUBLISH request with an Event: presence header and a message body...

CVE-2026-14529

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 traditional is vulnerable to server-side request forgery SSRF when the SIP container feature sipServlet-1.1 is enabled...

CVE-2026-14529

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 traditional is vulnerable to server-side request forgery SSRF when the SIP container feature sipServlet-1.1 is enabled...

CVE-2026-14529 IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a server-side request forgery

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 traditional is vulnerable to server-side request forgery SSRF when the SIP container feature sipServlet-1.1 is enabled...

CVE-2026-14529

IBM WebSphere Application Server (traditional 9.0 and 8.5) and WebSphere Application Server Liberty 17.0.0.3–26.0.0.8 are affected by SSRF when the SIP container feature sipServlet-1.1 is enabled. The vulnerability (CVE-2026-14529) is CVSSv3.1 base score 9.4 (CRITICAL) with an attack vector of NE...

CVE-2026-14529 IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a server-side request forgery

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 traditional is vulnerable to server-side request forgery SSRF when the SIP container feature sipServlet-1.1 is enabled...

PT-2026-65867

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server version 9.0 IBM WebSphere Application Server version 8.5 IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 26.0.0.8 Description Server-side request forgery SSRF is possible when the SIP...

CVE-2026-14529: Missing Authentication for Critical Function

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 traditional is vulnerable to server-side request forgery SSRF when the SIP container feature sipServlet-1.1 is enabled...

SUSE CVE-2026-54478

In NLnet Labs Unbound 1.18.0 up to and including 1.25.1, when Unbound listens on a 'proxy-protocol-port' interface with 'answer-cookie: yes', the RFC 9018 server-cookie SipHash is computed over the proxy's wire address instead of the PROXYv2-declared client. One server cookie obtained through a...

📄 SIP Sustainable Irrigation Platform 5.x Path Traversal

SIP Sustainable Irrigation Platform version 5.x Backup/Restore functionality suffers from a path traversal vulnerability. The keys in the JSON backup file which have been uploaded are not validated when they are used to generate file paths. An attacker with access to the restore feature can use t...

📄 SIP Sustainable Irrigation Platform 5.x Cross Site Scripting

SIP Sustainable Irrigation Platform version 5.x stores program names supplied through HTTP requests and later renders them into its web pages without proper output encoding. This can be exploited to execute arbitrary JavaScript in the browser of any user who views the affected pages by creating a...

CVE-2026-54478

CVE-2026-54478 affects NLnet Labs Unbound 1.18.0–1.25.1 when listening on a proxy-protocol-port with answer-cookie enabled. The RFC 9018 server-cookie (SipHash) is computed over the proxy’s wire address rather than the PROXYv2-declared client, causing a server cookie to validate for every PROXYv2...

ANT-2026-HFGGE6HR · asterisk/asterisk · stack_buffer_overflow

stack-buffer-overflow critical GHSA-589g-qgf8-m6mx Severity Claude critical · Security research firm critical revised; sealed as high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits...

PT-2026-95655

Name of the Vulnerable Software and Affected Versions Suricata versions 8.0.0 through 8.0.5 Description The SIP parser in rust/src/sip/parser.rs stores request and response body lengths in 16-bit fields. When a SIP body exceeds 65,536 bytes, the length is truncated. This prevents frame:request.bo...