Type Confusion in freeswitch - CVE-2026-116782
Published: November 9, 2026
Vulnerability identifier: #VU162776
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-116782
CWE-ID: CWE-843
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an unauthenticated remote attacker to crash FreeSWITCH and terminate every call handled by the instance.
The vulnerability exists due to missing AMF type validation in mod_rtmp connect handling, causing a non-object argument to be dereferenced as an object. An unauthenticated remote attacker can send a single malformed connect command to a reachable RTMP listener when the non-default mod_rtmp module is built and loaded, triggering denial of service without victim interaction.
Affected software
freeswitch
How to mitigate CVE-2026-116782
Install security update from vendor's website.
freeswitch - update to 1.11.2