A remote code execution vulnerability, CVE-2026-116779, has been identified in FreeSWITCH. – Affected Versions are FreeSWITCH 1.11.2 and earlier.
According to the details, the issue is related to Inbound SIP MESSAGE being able to select the "chat" API protocol and perform FreeSWITCH API command execution. – This vulnerability is described as allowing a threat actor to remotely perform FreeSWITCH API command execution.
A Vulnerability Patch has been provided via the latest update; FreeSWITCH version 1.11.3 or later resolves this issue. – Users of this product should update to the latest version with the Vulnerability Patch following the instructions on the reference site.
