UpstreamscvelistV5 00:11ZCISA KEV 01:18ZVulnrichment 00:11ZNVD 00:11ZEPSS 01:18Zdaily run 06:05 UTC · next hourly 02:15

Thu 5 Nov 2026

Today

120 new ≥ 9.0 · 11 actionable · signalwire clear

PriorityVulnerabilityCVSSEPSSSignals

signalwire3 vulnerabilitiesMax CVSS 9.8Priority 29KEV 0

29

CVE-2026-116779

signalwire freeswitch · FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commands

9.8–

27

CVE-2026-116785

signalwire freeswitch · FreeSWITCH: Pre-authentication heap out-of-bounds write in mod_xml_rpc WebSocket frame length handling

9.1–

27

CVE-2026-116790

signalwire freeswitch · FreeSWITCH: Inbound ICE connectivity checks are accepted without verifying STUN MESSAGE-INTEGRITY

9.1–

CVSS ×30KEV +30EPSS ×20exploit +10 · SSVC +10how the score works