PewSWITCH

PewSWITCH A FreeSWITCH specific scanning and exploitation toolkit for CVE-2021-37624 and CVE-2021-41157. Related blog: https://0xinfection.github.io/posts/analyzing-freeswitch-vulns/ Usage The help statement of the tool is as below: $ ./pewswitch --help . / |\ / /| // / / / - |/|/ /\ | |/|/ / / /...

freeswitch-cve-2026-116779-POC

fscve — FreeSWITCH CVE-2026-116779 toolkit Detection and exploitation tooling for CVE-2026-116779 — an unauthenticated command injection in FreeSWITCH where an inbound SIP MESSAGE can select the api chat protocol and reach switchapiexecute. CVE CVE-2026-116779 GHSA-mg63-h38w-8p9p Type CWE-78 OS...

freeswitch_rce

version: !1https://assets.kitploit.com/production/public/readmes/26769/65a2d4b4b9b040b96740cd66aee81ea...

CISA Warns of Active Exploitation of OpenSSH, GPUStack, FreeSWITCH, and IBM Flaws

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added four security flaws impacting GPUStack, SignalWire FreeSwitch, OpenBSD OpenSSH, and IBM Aspera Faspex to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerabilities are...

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-102895 GPUStack Improper Authentication Vulnerability CVE-2026-116779 SignalWire FreeSwitch Code Injection Vulnerability CVE-2026-123158 OpenBSD OpenSSH...

VulnCheck KEV: CVE-2026-116779

SignalWire FreeSwitch contains a code injection vulnerability that permits configuration and credential disclosure, arbitrary call control, and command execution...

SignalWire FreeSwitch Code Injection Vulnerability

SignalWire FreeSwitch contains a code injection vulnerability that permits configuration and credential disclosure, arbitrary call control, and command execution...

Exploit for CVE-2026-116779

fscve — FreeSWITCH CVE-2026-116779 toolkit !CIhttps://git...

CVE-2026-115928

A flaw was found in FreeSWITCH. A remote attacker can cause a Denial of Service DoS by sending a specially crafted Session Description Protocol SDP message containing a zero-length key and salt in the crypto attribute. This triggers an integer underflow that overflows a stack buffer with decoded...

CVE-2026-116568

A flaw was found in FreeSWITCH. A remote attacker can trigger a Denial of Service DoS by sending a specially crafted Real-Time Messaging Protocol RTMP video stream to a server running the RTMP module. Due to insufficient validation of video unit length headers, parsing the malformed stream causes...

CVE-2026-116787

A flaw was found in FreeSWITCH. An unauthenticated attacker with network access to the event socket interface can cause a Denial of Service DoS by sending a message with a specially crafted Content-Length header. Because the header is processed prior to authentication, supplying negative or...

CVE-2026-116784

A flaw was found in FreeSWITCH. A remote attacker participating in an active call can trigger an out-of-bounds read by sending a specially crafted Real-time Transport Control Protocol RTCP packet with an oversized declared length. This flaw can cause the FreeSWITCH service to crash, resulting in ...

CVE-2026-116790

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, FreeSWITCH's inbound ICE handling accepted every connectivity check without cryptographically...

CVE-2026-116789

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, dtlsstatesetup compared a peer certificate with the SDP a=fingerprint only when FreeSWITCH was th...

CVE-2026-116788

FreeSWITCH is an open-source software telecommunications platform. Before version 1.11.2, an integer underflow in switchxmldecode can cause an undersized heap allocation when an XML document declares an entity with an empty replacement value. Subsequent copying overruns the allocated buffer. An...

CVE-2026-116787

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, modeventsocket used an unauthenticated Content-Length value directly as the allocation size for a...

CVE-2026-116782

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, rtmpiconnect passed the first RTMP connect argument to amf0objectget without checking whether the...

CVE-2026-116781

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, wsreadframe unmasked a WebSocket payload by iterating wsh-datalen, which included frame headers,...

CVE-2026-116783

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, udptlrxpacket used a peer-controlled FEC entry count directly to fill five-entry FEC arrays in a...

CVE-2026-116785

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, wsreadframe decoded a WebSocket frame's 64-bit extended payload length with a 32-bit byte swap an...