Critical Buffer Overflow Vulnerability in OpenSIPS (CVE-2026-45537)
ID: 9eafb6a7-e412-5faf-a154-0eb1abe6a3e9
STIX ID: report--9eafb6a7-e412-5faf-a154-0eb1abe6a3e9
Feed Name: ThreatCluster
Threat Score
CVE-2026-45537 is a critical buffer overflow in OpenSIPS (construct_uri) that allows remote unauthenticated attackers to overflow a fixed 1024-byte buffer via long SIP usernames, potentially corrupting global data and altering routing; affected versions prior to 3.6.6 and 4.0.0-rc1 have been patched (CVSS 9.1, published 2026-08-04).
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.