OpenSIPS vulnerabilities

CVEs per yearBy the year they were published

1. 202311
2. 20269

Newest CVEs

• CVE-2026-46334

  OpenSIPS: Denial of Service in SDP bandwidth parsing via QoS SDP cloning

  OpenSIPS · opensips

  High8.7
• CVE-2026-45809

  OpenSIPS: Denial of Service in watcherinfo XML generation from oversized watcher URI

  OpenSIPS · opensips

  High8.7
• CVE-2026-45705

  OpenSIPS: OOB Read in Multipart Body Boundary Parsing

  OpenSIPS · opensips

  Medium5.3
• CVE-2026-45537

  OpenSIPS: Global Buffer Overflow in construct_uri

  OpenSIPS · opensips

  Critical9.1
• CVE-2026-45103

  OpenSIPS: SIP Message Smuggling via TCP Content-Length Integer Overflow

  OpenSIPS · opensips

  High7.5
• CVE-2026-45100

  OpenSIPS: Buffer Overflow in Base64 Encode Transformation

  OpenSIPS · opensips

  Critical9.1
• CVE-2026-45084

  OpenSIPS: Denial of service in presence.handle_publish() from unchecked Content-Type state

  OpenSIPS · opensips

  High8.7
• CVE-2026-45538

  OpenSIPS: Stack Buffer Overflow in sip_to_json() Header Name Copy

  OpenSIPS · opensips

  Critical9.8
• CVE-2026-25554

  OpenSIPS 3.1 <= 3.6.4 auth_jwt SQL Injection Enables JWT Authentication Bypass

  OpenSIPS · OpenSIPS

  High8.3
• CVE-2023-28099

  OpenSIPS has vulnerability in the ds_is_in_list() function

  OpenSIPS · opensips

  Medium5.9