# SignalWire vulnerabilities Source: https://junglewise.ai/threats/vendors/signalwire Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/signalwire.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 29 vulnerabilities in SignalWire: 0 in the last 7 days and 20 in the last 90 days, 5 of them critical and 1 exploited in the wild. The most recent, CVE-2026-116790, was published on 5 November 2026. 19 vulnerabilities in the last four weeks, up from none in the four before. 3 critical against 0, 1 exploited in the wild against 0. 1 technology has a page of its own. ## Counts - Last 7 days: 0 - Last 30 days: 19 - Last 90 days: 20 - All time: 29 (5 critical, 1 exploited in the wild) ## About SignalWire SignalWire is a technology company that provides cloud-native communications APIs and is the primary maintainer of the FreeSWITCH project. ## Latest SignalWire vulnerabilities - [CVE-2026-116790: FreeSWITCH ICE integrity validation bypass](https://junglewise.ai/threats/cve-2026-116790-freeswitch-is-a-software-defined-telecom-stack-enabling-the) (critical, CVSS 9.1, published 5 Nov 2026) - [CVE-2026-116789: FreeSWITCH DTLS fingerprint validation bypass in server role](https://junglewise.ai/threats/cve-2026-116789-freeswitch-is-a-software-defined-telecom-stack-enabling-the) (high, CVSS 7.4, published 5 Nov 2026) - [CVE-2026-116788: FreeSWITCH integer underflow in XML decode](https://junglewise.ai/threats/cve-2026-116788-freeswitch-is-an-open-source-software-telecommunications) (high, CVSS 8.2, published 5 Nov 2026) - [CVE-2026-116787: FreeSWITCH mod_event_socket denial of service via Content-Length](https://junglewise.ai/threats/cve-2026-116787-freeswitch-is-a-software-defined-telecom-stack-enabling-the) (high, CVSS 7.5, published 5 Nov 2026) - [CVE-2026-116786: FreeSWITCH command injection via SIP REFER URI parameters](https://junglewise.ai/threats/cve-2026-116786-freeswitch-is-a-software-defined-telecom-stack-enabling-the) (high, CVSS 8.8, published 5 Nov 2026) - [CVE-2026-116785: FreeSWITCH WebSocket frame length heap overflow](https://junglewise.ai/threats/cve-2026-116785-freeswitch-is-a-software-defined-telecom-stack-enabling-the) (critical, CVSS 9.1, published 5 Nov 2026) - [CVE-2026-116784: FreeSWITCH out-of-bounds read in RTCP NACK handler](https://junglewise.ai/threats/cve-2026-116784-freeswitch-is-a-software-defined-telecom-stack-enabling-the) (high, CVSS 7.5, published 5 Nov 2026) - [CVE-2026-116783: FreeSWITCH buffer overflow in mod_spandsp UDPTL FEC parsing](https://junglewise.ai/threats/cve-2026-116783-freeswitch-is-a-software-defined-telecom-stack-enabling-the) (high, CVSS 8.2, published 5 Nov 2026) - [CVE-2026-116782: FreeSWITCH RTMP AMF parsing null dereference](https://junglewise.ai/threats/cve-2026-116782-freeswitch-is-a-software-defined-telecom-stack-enabling-the) (high, CVSS 7.5, published 5 Nov 2026) - [CVE-2026-116781: FreeSWITCH WebSocket frame parser out-of-bounds write](https://junglewise.ai/threats/cve-2026-116781-freeswitch-is-a-software-defined-telecom-stack-enabling-the) (medium, CVSS 5.3, published 5 Nov 2026) - [CVE-2026-116779: FreeSWITCH command injection via SIP MESSAGE chat protocol](https://junglewise.ai/threats/cve-2026-116779-freeswitch-is-a-software-defined-telecom-stack-enabling-the) (critical, exploited in the wild, CVSS 9.8, published 5 Nov 2026) - [CVE-2026-116572: FreeSWITCH stack buffer overflow in mod_sofia Contact display name](https://junglewise.ai/threats/cve-2026-116572-freeswitch-is-an-open-source-software-telecommunications) (medium, CVSS 6.5, published 5 Nov 2026) - [CVE-2026-116571: FreeSWITCH stack buffer overflow in mod_rtmp H.264 handling](https://junglewise.ai/threats/cve-2026-116571-freeswitch-is-a-software-defined-telecom-stack-enabling-the) (medium, CVSS 5.9, published 5 Nov 2026) - [CVE-2026-116569: FreeSWITCH MSRP buffer underflow in msrp_parse_buffer](https://junglewise.ai/threats/cve-2026-116569-freeswitch-is-a-software-defined-telecom-stack-enabling-the) (high, CVSS 7.5, published 5 Nov 2026) - [CVE-2026-116568: FreeSWITCH H.264 NAL unit buffer overread in mod_rtmp](https://junglewise.ai/threats/cve-2026-116568-freeswitch-is-a-software-defined-telecom-stack-enabling-the) (high, CVSS 7.5, published 5 Nov 2026) - [CVE-2026-116567: FreeSWITCH stack buffer overflow in RTMP control message handler](https://junglewise.ai/threats/cve-2026-116567-freeswitch-is-a-software-defined-telecom-stack-enabling-the) (high, CVSS 7.5, published 5 Nov 2026) - [CVE-2026-115928: FreeSWITCH stack buffer overflow in SDES-SRTP parser](https://junglewise.ai/threats/cve-2026-115928-freeswitch-is-a-software-defined-telecom-stack-enabling-the) (high, CVSS 7.5, published 5 Nov 2026) - [CVE-2026-116574: FreeSWITCH XML escape encoder buffer overrun in switch_xml_ampencode()](https://junglewise.ai/threats/cve-2026-116574-freeswitch-is-a-software-defined-telecom-stack-enabling-the) (medium, CVSS 5.9, published 5 Nov 2026) - [CVE-2026-116573: FreeSWITCH mod_sofia stack buffer overflow in dialog notifications](https://junglewise.ai/threats/cve-2026-116573-freeswitch-is-an-open-source-software-telecommunications) (medium, CVSS 6.5, published 5 Nov 2026) - [CVE-2026-49846: signalwire libks path traversal in HTTP URI parser](https://junglewise.ai/threats/cve-2026-49846-signalwire-libks-path-traversal-in-http-uri-parser) (high, CVSS 7.5, published 11 Sep 2026) - [CVE-2026-49848: FreeSWITCH mod_verto userVariables injection in check_auth](https://junglewise.ai/threats/cve-2026-49848-freeswitch-mod-verto-uservariables-injection-in-check-auth) (medium, CVSS 4.3, published 9 Jun 2026) - [CVE-2026-49847: FreeSWITCH stack overflow in cJSON parser via mod_verto](https://junglewise.ai/threats/cve-2026-49847-freeswitch-stack-overflow-in-cjson-parser-via-mod-verto) (high, CVSS 7.5, published 9 Jun 2026) - [CVE-2026-49843: FreeSWITCH improper authentication in mod_verto allows session eviction](https://junglewise.ai/threats/cve-2026-49843-freeswitch-improper-authentication-in-mod-verto-allows-session) (medium, CVSS 5.3, published 9 Jun 2026) - [CVE-2026-49842: SignalWire FreeSWITCH bandwidth amplification in mod_verto](https://junglewise.ai/threats/cve-2026-49842-signalwire-freeswitch-bandwidth-amplification-in-mod-verto) (high, CVSS 7.5, published 9 Jun 2026) - [CVE-2026-49841: SignalWire FreeSWITCH heap overflow in mod_verto HTTP POST handler](https://junglewise.ai/threats/cve-2026-49841-signalwire-freeswitch-heap-overflow-in-mod-verto-http-post) (critical, CVSS 9.8, published 9 Jun 2026) ## Most severe SignalWire vulnerabilities - [CVE-2026-116779: FreeSWITCH command injection via SIP MESSAGE chat protocol](https://junglewise.ai/threats/cve-2026-116779-freeswitch-is-a-software-defined-telecom-stack-enabling-the) (critical, exploited in the wild, CVSS 9.8, published 5 Nov 2026) - [CVE-2026-49841: SignalWire FreeSWITCH heap overflow in mod_verto HTTP POST handler](https://junglewise.ai/threats/cve-2026-49841-signalwire-freeswitch-heap-overflow-in-mod-verto-http-post) (critical, CVSS 9.8, published 9 Jun 2026) - [CVE-2026-116790: FreeSWITCH ICE integrity validation bypass](https://junglewise.ai/threats/cve-2026-116790-freeswitch-is-a-software-defined-telecom-stack-enabling-the) (critical, CVSS 9.1, published 5 Nov 2026) - [CVE-2026-116785: FreeSWITCH WebSocket frame length heap overflow](https://junglewise.ai/threats/cve-2026-116785-freeswitch-is-a-software-defined-telecom-stack-enabling-the) (critical, CVSS 9.1, published 5 Nov 2026) - [CVE-2026-49840: SignalWire FreeSWITCH heap buffer overflow in libesl Content-Length parsing](https://junglewise.ai/threats/cve-2026-49840-signalwire-freeswitch-heap-buffer-overflow-in-libesl-content) (critical, CVSS 9.1, published 9 Jun 2026) - [CVE-2026-116786: FreeSWITCH command injection via SIP REFER URI parameters](https://junglewise.ai/threats/cve-2026-116786-freeswitch-is-a-software-defined-telecom-stack-enabling-the) (high, CVSS 8.8, published 5 Nov 2026) - [CVE-2026-116788: FreeSWITCH integer underflow in XML decode](https://junglewise.ai/threats/cve-2026-116788-freeswitch-is-an-open-source-software-telecommunications) (high, CVSS 8.2, published 5 Nov 2026) - [CVE-2026-116783: FreeSWITCH buffer overflow in mod_spandsp UDPTL FEC parsing](https://junglewise.ai/threats/cve-2026-116783-freeswitch-is-a-software-defined-telecom-stack-enabling-the) (high, CVSS 8.2, published 5 Nov 2026) - [CVE-2026-49846: signalwire libks path traversal in HTTP URI parser](https://junglewise.ai/threats/cve-2026-49846-signalwire-libks-path-traversal-in-http-uri-parser) (high, CVSS 7.5, published 11 Sep 2026) - [CVE-2026-116787: FreeSWITCH mod_event_socket denial of service via Content-Length](https://junglewise.ai/threats/cve-2026-116787-freeswitch-is-a-software-defined-telecom-stack-enabling-the) (high, CVSS 7.5, published 5 Nov 2026) ## Vulnerabilities per week 19 vulnerabilities in the last four weeks, up from none in the four before. 3 critical against 0, 1 exploited in the wild against 0. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 1 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 19 | 3 | 1 | | 9 Nov 2026 | 0 | 0 | 0 | ## SignalWire technologies - [SignalWire Freeswitch](https://junglewise.ai/threats/technologies/freeswitch): 28 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "SignalWire vulnerabilities", https://junglewise.ai/threats/vendors/signalwire, 13 November 2026.