CVE-2026-39864

Kamailio (SIP signaling server) is affected by CVE-2026-39864 in the auth module. An out-of-bounds read allows remote attackers to trigger a denial of service (process crash) by sending a specially crafted SIP packet after a successful user authentication that did not involve a database backend, ...