CVE-2026-116570

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, httpdirectoryauth rebuilt an expected user@domain:password credential and base64-encoded it into ...

CVE-2026-116570

FreeSWITCH versions prior to 1.11.2 are vulnerable to a pre-authentication stack buffer overflow within the http_directory_auth() function of the mod_xml_rpc module. The root cause is an encoder that fails to check output length when base64-encoding a user@domain:password credential into an 80-by...