CVE-2026-110679

7.3 HIGHpublic exploit available

Published 2026-10-14 · Updated 2026-10-15

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

A vulnerability was determined in OpenSIPS up to 3.6.8/4.0.1. The impacted element is the function rtpproxy_offer/rtpproxy_answer of the component rtpproxy. This manipulation causes out-of-bounds read. The attack may be initiated remotely. Upgrading to version 3.6.9 and 4.0.2 is sufficient to resolve this issue. It is advisable to upgrade the affected component.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weaknesses

CWE-119, CWE-125

Public exploit & PoC references

https://github.com/OpenSIPS/opensips/
https://github.com/OpenSIPS/opensips/releases/tag/4.0.2
https://github.com/OpenSIPS/opensips/security/advisories/GHSA-qv9x-v8jq-434w

All references

https://github.com/OpenSIPS/opensips/
https://github.com/OpenSIPS/opensips/releases/tag/4.0.2
https://github.com/OpenSIPS/opensips/security/advisories/GHSA-qv9x-v8jq-434w
https://vuldb.com/cve/CVE-2026-110679
https://vuldb.com/submit/1003897
https://vuldb.com/vuln/419834
https://vuldb.com/vuln/419834/cti

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2026-101204
MEDIUMCVE-2026-101205
LOWCVE-2026-105164PoC
MEDIUMCVE-2026-105251PoC
MEDIUMCVE-2026-105775PoC
MEDIUMCVE-2026-108573
HIGHCVE-2026-108906PoC
MEDIUMCVE-2026-108955PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.