CVE-2026-116788

    Dashboard / Vulnerabilities / CVE-2026-116788

    CVE-2026-116788

    Published: 5 Nov 2026Last Modified: 7 Nov 2026

    Summary: FreeSWITCH: Pre-authentication heap buffer overflow in core XML empty-entity decoding

    Details: FreeSWITCH is an open-source software telecommunications platform. Before version 1.11.2, an integer underflow in  switch_xml_decode()  can cause an undersized heap allocation when an XML document declares an entity with an empty replacement value. Subsequent copying overruns the allocated buffer. An unauthenticated attacker who can reach a SIP profile with presence management enabled and DTD processing permitted can trigger the vulnerability through a crafted SIP PUBLISH request. Exploitation can corrupt heap memory and terminate the FreeSWITCH process, interrupting all active calls. This vulnerability is fixed in version 1.11.2.

    References: https://github.com/signalwire/freeswitch/releases/tag/v1.11.2, https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/116xxx/CVE-2026-116788.json, https://github.com/signalwire/freeswitch/security/advisories/GHSA-f73w-xph4-pjp3, https://nvd.nist.gov/vuln/detail/CVE-2026-116788, https://github.com/signalwire/freeswitch/commit/587474a1584488f0c04201e6e61efe76aa5bda01

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -3f13ad1b1d323e435757fc43a2bb829d4ea5b9a8

    Affected versions

    v1.11.1
    v1.11.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2026-116788 | CVE-DB