Kamailio

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 22
    Known Exploited: 0
    7
    Critical Level Threats
    8
    High Level Threats
    5
    Medium Level Threats
    2
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-106803

    A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_registrar_pcscf module. When processing a crafted application/reginfo+xml NOTIFY message, process_contact() copies an attacker-controlled port value from the alias parameter into a fixed 5-byte stack buffer without validating its length. An unauthenticated remote attacker can trigger stack corruption and terminate the P-CSCF process, resulting in denial of service.

    Last Modified: Nov 03, 2026
    Published: Nov 02, 2026

    CVE-2026-106804

    Remote Host Field Overflow in Kamailio ims_qos_npn Causes Denial of Service

    Last Modified: Nov 02, 2026
    Published: Nov 02, 2026

    CVE-2026-108822

    Kamailio sipt ss7_parser.c isup_get_calling_party buffer overflow

    Last Modified: Oct 14, 2026
    Published: Oct 12, 2026

    CVE-2026-93962

    Kamailio CDP Diameter Receiver receiver.c shm_malloc heap-based overflow

    Last Modified: Sep 22, 2026
    Published: Sep 20, 2026

    CVE-2026-52022

    An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the IMS P-CSCF registration handling components

    Last Modified: Sep 04, 2026
    Published: Sep 01, 2026
    Items Per Page
    Kamailio Vulnerabilities & Security CVEs | CVE-DB