CVE-2026-116789

In versions prior to 1.11.2 , FreeSWITCH is vulnerable to a flaw where the dtls_state_setup() function fails to bind the peer certificate to the SDP a=fingerprint when acting as a DTLS server . An unauthenticated peer reaching the negotiated media port can complete the DTLS-SRTP handshake using a...