Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.1
CVE-2026-116790: FreeSWITCH before 1.11.2 allows media hijacking
CVE-2026-116790 · published today
Summary
Versions of FreeSWITCH older than 1.11.2 do not properly check the authenticity of incoming network checks that set up voice and video streams. This weakness lets an attacker on the same network insert themselves into the call, listen to or alter the conversation, and break the intended media flow. Upgrade to version 1.11.2 or later, which adds the required verification setting, to stop this behavior.
Original advisory text
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11....
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, FreeSWITCH's inbound ICE handling accepted every connectivity check without cryptographically validating its STUN MESSAGE-INTEGRITY attribute. A network peer able to reach an ICE-enabled leg's media port could forge an ICE connectivity check without SDP credentials, nominate its own address, redirect RTP and DTLS traffic, and terminate the legitimate media path. On unencrypted legs this enables eavesdropping and media injection, while all WebRTC and SIP legs that negotiate ICE are in scope. Version 1.11.2 introduces the remediation, which requires ice_verify_message_integrity=true.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-290Authentication Bypass by Spoofing
CWE-347Improper Verification of Cryptographic Signature
Timeline
Published5 Nov 2026
Updated5 Nov 2026
First seen5 Nov 2026
Sources
CVE-2026-116790 · NVD
Track software like this
Free during beta