# Kamailio vulnerabilities Source: https://junglewise.ai/threats/technologies/kamailio Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 12 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/kamailio.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 12 vulnerabilities in Kamailio: 0 in the last 7 days and 7 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-106804, was published on 2 November 2026. 3 vulnerabilities in the last four weeks, up 200% on the four before (1). ## Counts - Last 7 days: 0 - Last 30 days: 2 - Last 90 days: 7 - All time: 12 (0 critical, 0 exploited in the wild) ## About Kamailio Kamailio is an open-source SIP server used for large-scale VoIP and real-time communication platforms. ## Latest Kamailio vulnerabilities - [CVE-2026-106804: Kamailio stack buffer overflow in ims_qos_npn module](https://junglewise.ai/threats/cve-2026-106804-a-stack-based-buffer-overflow-exists-in-kamailio-v6-1-3-and-v6-1) (info, published 2 Nov 2026) - [CVE-2026-106803: Kamailio stack buffer overflow in ims_registrar_pcscf module](https://junglewise.ai/threats/cve-2026-106803-a-stack-based-buffer-overflow-exists-in-kamailio-v6-1-3-and-v6-1) (info, published 2 Nov 2026) - [CVE-2026-108822: Kamailio sipt module buffer overflow in ISUP parser](https://junglewise.ai/threats/cve-2026-108822-a-vulnerability-was-detected-in-kamailio-up-to-6-0-7-6-1-3-the) (medium, CVSS 5.3, published 12 Oct 2026) - [CVE-2026-93962: Kamailio heap buffer overflow in CDP Diameter Receiver](https://junglewise.ai/threats/cve-2026-93962-a-weakness-has-been-identified-in-kamailio-up-to-5-8-8-6-0-7-6-1) (high, CVSS 8.3, published 20 Sep 2026) - [CVE-2026-52023: Kamailio ims_registrar_pcscf double free in security agreement parsing](https://junglewise.ai/threats/cve-2026-52023-kamailio-ims-registrar-pcscf-double-free-in-security-agreement) (high, CVSS 7.5, published 1 Sep 2026) - [CVE-2026-52022: Kamailio IMS P-CSCF denial of service in REGISTER handling](https://junglewise.ai/threats/cve-2026-52022-kamailio-ims-p-cscf-denial-of-service-in-register-handling) (high, CVSS 7.5, published 1 Sep 2026) - [CVE-2026-82608: Kamailio out-of-bounds read in AVP Handler](https://junglewise.ai/threats/cve-2026-82608-kamailio-out-of-bounds-read-in-avp-handler) (high, CVSS 7.4, published 31 Aug 2026) - [CVE-2026-39864: Kamailio out-of-bounds read in auth module](https://junglewise.ai/threats/cve-2026-39864-kamailio-out-of-bounds-read-in-auth-module) (medium, CVSS 4.4, published 8 Apr 2026) - [CVE-2025-12207: A vulnerability has been found in Kamailio 5.5. This affects the function yyerror_at of the file src/core/cfg.y of the…](https://junglewise.ai/threats/cve-2025-12207-a-vulnerability-has-been-found-in-kamailio-5-5-this-affects-the) (low, CVSS 3.3, published 27 Oct 2025) - [CVE-2025-12206: A flaw has been found in Kamailio 5.5. The impacted element is the function rve_is_constant of the file…](https://junglewise.ai/threats/cve-2025-12206-a-flaw-has-been-found-in-kamailio-5-5-the-impacted-element-is-the) (low, CVSS 3.3, published 27 Oct 2025) - [CVE-2025-12205: A vulnerability was detected in Kamailio 5.5. The affected element is the function sr_push_yy_state of the file…](https://junglewise.ai/threats/cve-2025-12205-a-vulnerability-was-detected-in-kamailio-5-5-the-affected-element) (medium, CVSS 5.3, published 27 Oct 2025) - [CVE-2025-12204: A security vulnerability has been detected in Kamailio 5.5. Impacted is the function rve_destroy of the file…](https://junglewise.ai/threats/cve-2025-12204-a-security-vulnerability-has-been-detected-in-kamailio-5-5) (medium, CVSS 5.3, published 27 Oct 2025) ## Most severe Kamailio vulnerabilities - [CVE-2026-93962: Kamailio heap buffer overflow in CDP Diameter Receiver](https://junglewise.ai/threats/cve-2026-93962-a-weakness-has-been-identified-in-kamailio-up-to-5-8-8-6-0-7-6-1) (high, CVSS 8.3, published 20 Sep 2026) - [CVE-2026-52023: Kamailio ims_registrar_pcscf double free in security agreement parsing](https://junglewise.ai/threats/cve-2026-52023-kamailio-ims-registrar-pcscf-double-free-in-security-agreement) (high, CVSS 7.5, published 1 Sep 2026) - [CVE-2026-52022: Kamailio IMS P-CSCF denial of service in REGISTER handling](https://junglewise.ai/threats/cve-2026-52022-kamailio-ims-p-cscf-denial-of-service-in-register-handling) (high, CVSS 7.5, published 1 Sep 2026) - [CVE-2026-82608: Kamailio out-of-bounds read in AVP Handler](https://junglewise.ai/threats/cve-2026-82608-kamailio-out-of-bounds-read-in-avp-handler) (high, CVSS 7.4, published 31 Aug 2026) - [CVE-2026-108822: Kamailio sipt module buffer overflow in ISUP parser](https://junglewise.ai/threats/cve-2026-108822-a-vulnerability-was-detected-in-kamailio-up-to-6-0-7-6-1-3-the) (medium, CVSS 5.3, published 12 Oct 2026) - [CVE-2025-12204: A security vulnerability has been detected in Kamailio 5.5. Impacted is the function rve_destroy of the file…](https://junglewise.ai/threats/cve-2025-12204-a-security-vulnerability-has-been-detected-in-kamailio-5-5) (medium, CVSS 5.3, published 27 Oct 2025) - [CVE-2025-12205: A vulnerability was detected in Kamailio 5.5. The affected element is the function sr_push_yy_state of the file…](https://junglewise.ai/threats/cve-2025-12205-a-vulnerability-was-detected-in-kamailio-5-5-the-affected-element) (medium, CVSS 5.3, published 27 Oct 2025) - [CVE-2026-39864: Kamailio out-of-bounds read in auth module](https://junglewise.ai/threats/cve-2026-39864-kamailio-out-of-bounds-read-in-auth-module) (medium, CVSS 4.4, published 8 Apr 2026) - [CVE-2025-12206: A flaw has been found in Kamailio 5.5. The impacted element is the function rve_is_constant of the file…](https://junglewise.ai/threats/cve-2025-12206-a-flaw-has-been-found-in-kamailio-5-5-the-impacted-element-is-the) (low, CVSS 3.3, published 27 Oct 2025) - [CVE-2025-12207: A vulnerability has been found in Kamailio 5.5. This affects the function yyerror_at of the file src/core/cfg.y of the…](https://junglewise.ai/threats/cve-2025-12207-a-vulnerability-has-been-found-in-kamailio-5-5-this-affects-the) (low, CVSS 3.3, published 27 Oct 2025) ## Vulnerabilities per week 3 vulnerabilities in the last four weeks, up 200% on the four before (1). | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 3 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 1 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 1 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 2 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Kamailio vulnerabilities", https://junglewise.ai/threats/technologies/kamailio, 12 November 2026.