#SignalWire
LightNews LightNews
xploitdigest-kev.bsky.social
Do you run SignalWire FreeSwitch?

CISA lists CVE-2026-116779 as exploited (added 9 Nov 2026).

Can it reach you? Over a network, with no login and no click. CVSS 9.8.

Plain-English breakdown:
xploitdigest.com/kev/CVE-2026-116779

#SignalWire #CyberSecurity #InfoSec #Vulnerability #CVE #KEV
CVE-2026-116779 — SignalWire FreeSwitch
Decoded in plain English on XploitDigest.
xploitdigest.com
November 10, 2026 at 5:25 AM
patchsonar.com
Zero-day · Newly listed by CISA: SignalWire FreeSwitch
SignalWire FreeSwitch Code Injection Vulnerability

What to do: Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the…

https://patchsonar.com/cve/CVE-2026-116779 #ZeroDay #CyberSecurity
SignalWire FreeSwitch: SignalWire FreeSwitch Code Injection Vulnerability
Install the vendor's security update. If there isn't one yet, apply the vendor's workaround, or stop using the product until it's fixed. CISA lists this as actively exploited, so treat it as urgent.
patchsonar.com
November 9, 2026 at 5:50 PM
vulnidx-jp.bsky.social
【悪用確認】CVE-2026-116779
SignalWire FreeSwitch Code Injection Vulnerability
SignalWire FreeSwitch
CISA 追加 11/9・対応期限 11/12
https://nvd.nist.gov/vuln/detail/CVE-2026-116779
#脆弱性 #KEV #SignalWire
November 9, 2026 at 5:55 PM
hapsis.bsky.social
IBM Aspera Faspex, SignalWire FreeSwitch Vulnerabilities Exploited in Attacks

www.securityweek.com/ibm-aspera-f...

#Kyberturvallisuus #ThreatIntel #Haavoittuvuus
IBM Aspera Faspex, SignalWire FreeSwitch Vulnerabilities Exploited in Attacks
CISA warns of exploited IBM Aspera Faspex (CVE-2026-123218) and SignalWire FreeSwitch (CVE-2026-116779) vulnerabilities.
www.securityweek.com
November 10, 2026 at 10:02 AM
eventmonitor.bsky.social
CVE-2026-116779: SignalWire FreeSwitch Code Injection Vulnerability
https://cyber.eventmonitor.net/incident/EM-20261109-YBDK/cve-2026-116779-signalwire-freeswitch-code-injection-vulnerability/
#news #cybersecurity
November 9, 2026 at 5:23 PM
ninjaintelgroup.bsky.social
🚨 NEW on CISA KEV — exploited in the wild
SignalWire FreeSwitch: SignalWire FreeSwitch Code Injection Vulnerability
CVE-2026-116779 · patch by 2026-11-12
🔗 https://ninjasignal.ninja/intel/cve/CVE-2026-116779
#KEV #cybersecurity #infosec
November 9, 2026 at 9:15 PM
axnews.bsky.social
⚠️ Exploited in the wild: CVE-2026-116779
SignalWire FreeSwitch Code Injection Vulnerability
Added to CISA KEV · Critical 9.8
Impacted if: signalwire freeswitch < 1.11.3
https://ax-news.com/cve/CVE-2026-116779
#CVE #KEV #infosec
November 9, 2026 at 6:11 PM
neonotu.bsky.social
🔴 KRITISCH · SignalWire FreeSWITCH: Codeausführung möglich

CERT-Bund (BSI)
SignalWire FreeSWITCH: Codeausführung möglich
CERT-Bund (BSI) meldet eine Schwachstelle in SignalWire FreeSWITCH mit dem Schweregrad kritisch. Als Auswirkung wird Codeausführung genannt. Die vollständige Beschreibung mit betroffenen Versionen un…
alerts.neonotu.com
November 6, 2026 at 1:08 AM
blackhatnews.tokyo
IBM Aspera FaspexとSignalWire FreeSwitchの脆弱性、攻撃で悪用される

米サイバーセキュリティ・インフラストラクチャセキュリティ庁（CISA）は月曜日、脅威アクターがIBM Aspera FaspexとSignalWire FreeSwitchの新たな脆弱性を攻撃に悪用していると警告しました。 Faspexの脆弱性は「CVE-2026-123218」（CVSSスコア9.8）として追跡され
IBM Aspera FaspexとSignalWire FreeSwitchの脆弱性、攻撃で悪用される
米サイバーセキュリティ・インフラストラクチャセキュリティ庁（CISA）は月曜日、脅威アクターがIBM Aspera FaspexとSignalWire FreeSwitchの新たな脆弱性を攻撃に悪用していると警告しました。 Faspexの脆弱性は「CVE-2026-123218」（CVSSスコア9.8）として追跡され
blackhatnews.tokyo
November 10, 2026 at 9:52 AM
chuiho.net
🚨速報［警戒］FreeSWITCH CVE-2026-116779 が悪用され CISA KEV に追加
IP 電話基盤 SignalWire FreeSWITCH 1.11.2 以前の欠陥 CVE-2026-116779（CVSS 9.8）が実際に悪用された。1.11.3 で修正。公開事業者の確認点をまとめる。
https://chuiho.net/posts/freeswitch-cve-2026-116779-kev/ #FreeSWITCH #SignalWire
FreeSWITCH CVE-2026-116779 が悪用され CISA KEV に追加
IP 電話基盤 SignalWire FreeSWITCH 1.11.2 以前の欠陥 CVE-2026-116779（CVSS 9.8）が実際に悪用された。1.11.3 で修正。公開事業者の確認点をまとめる。
chuiho.net
November 10, 2026 at 12:15 PM
5. CVE-2026-116779 · 16 people 🔥
🟥 Critical 9.8 · signalwire freeswitch

FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commands
November 10, 2026 at 7:15 PM
axnews.bsky.social
🚨 Breaking: CVE-2026-116779 — Critical 9.8 · exploited
Impacted if: signalwire freeswitch < 1.11.3
Command injection · over the network · no login
https://ax-news.com/cve/CVE-2026-116779
#CVE #infosec
November 10, 2026 at 10:13 AM
therealistjuggernaut.com
therealistjuggernaut.com/2026/11/10/c...
CISA ADDS FOUR ACTIVELY EXPLOITED VULNERABILITIES TO KEV CATALOG
THREAT SUMMARY Category: Known Exploited Vulnerabilities / Authentication Security / Code Injection / OpenSSH Security / File Transfer SecurityAffected Product(s): GPUStack; SignalWire FreeSWITCH; …
therealistjuggernaut.com
November 10, 2026 at 8:20 AM
malice.ai
The critical code injection bug in SignalWire FreeSwitch is fixed in version 1.11.3; CISA's due date for the required mitigations is November 12.
CISA adds exploited FreeSWITCH flaw CVE-2026-116779 to KEV catalog
malice.ai
November 9, 2026 at 5:02 PM
cybowl.bsky.social
🔴 Exploitation confirmée (CISA KEV, ajouts du 09/11) · 3
• GPUStack CVE-2026-102895, CVSS 9.8
• SignalWire FreeSwitch CVE-2026-116779, CVSS 9.8
• IBM Aspera Faspex CVE-2026-123218, CVSS 9.8
Veille du 2026-11-09
La France accuse officiellement les Gardiens de la Révolution iraniens d’être à l’origine de la cyberattaque contre les frigos connectés de supermarchés en octobre, provoquant des pertes matérielles et des incendies.
www.cybowl.eu
November 10, 2026 at 6:14 AM
cyfar.ca
~Cisa~
CISA added four actively exploited vulnerabilities to its KEV Catalog: GPUStack, SignalWire FreeSWITCH, OpenBSD OpenSSH, and IBM Aspera Faspex, requiring...
-
IOCs: CVE-2026-102895, CVE-2026-116779
-
#ExploitedVulnerability #PatchManagement #ThreatIntel #Vulnerability
Link
www.cisa.gov
November 10, 2026 at 4:01 AM
threatroundup.bsky.social
CVE-2026-116779 (SignalWire FreeSwitch) just landed on CISA's exploited list, CVSS 9.8. FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from… Public exploit code reported. EPSS 1.3%. #KEV #infosec

threatroundup.com/cve/cve-2026...
November 9, 2026 at 5:10 PM
gridwatchsignal.bsky.social
FreeSWITCH CVE-2026-116779: one accepted SIP MESSAGE can let a peer run FreeSWITCH API commands, including OS commands. SignalWire says it has been exploited in the wild. Fix: 1.11.3+. Stopgap: enable-chat=false (auth-messages alone isn't enough).
November 10, 2026 at 6:06 PM
vulnidx-jp.bsky.social
【日本語の公式情報】CVE-2026-116779
FreeSWITCHにおける複数の脆弱性
CISA の悪用確認（11/9）の後、JVN が日本語の公式情報を公開
https://jvndb.jvn.jp/ja/contents/2026/JVNDB-2026-042579.html
#脆弱性 #SignalWire
November 10, 2026 at 8:55 AM
euvd-bot.bsky.social
🚨 EUVD-2026-117759
📊 8.2/10
🏢 signalwire

📝 FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation tha...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117759

#cybersecurity #infosec #cve #euvd
November 10, 2026 at 12:08 AM
euvd-bot.bsky.social
🚨 EUVD-2026-117755
📊 8.2/10
🏢 signalwire

📝 FreeSWITCH is an open-source software telecommunications platform. Before version 1.11.2, an integer underflow in  switch_xml_decode()  can cause an ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117755

#cybersecurity #infosec #cve #euvd
November 9, 2026 at 7:05 PM
euvd-bot.bsky.social
🚨 EUVD-2026-117754
📊 2.7/10
🏢 signalwire

📝 FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation tha...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117754

#cybersecurity #infosec #cve #euvd
November 9, 2026 at 7:03 PM
euvd-bot.bsky.social
🚨 EUVD-2026-117758
📊 9.1/10
🏢 signalwire

📝 FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation tha...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117758

#cybersecurity #infosec #cve #euvd
November 9, 2026 at 7:03 PM
euvd-bot.bsky.social
🚨 EUVD-2026-117752
📊 9.8/10
🏢 signalwire

📝 FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation tha...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-117752

#cybersecurity #infosec #cve #euvd
November 7, 2026 at 6:02 AM
thehackernews.com.web.brid.gy
CISA Warns of Active Exploitation of OpenSSH, GPUStack, FreeSWITCH, and IBM Flaws
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added four security flaws impacting GPUStack, SignalWire FreeSwitch, OpenBSD OpenSSH, and IBM Aspera Faspex to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities are listed below - CVE-2026-123218 (CVSS score: 9.8) - An incorrect authorization vulnerability
thehackernews.com
November 10, 2026 at 8:33 AM