CISA adds SignalWire FreeSwitch code injection to KEV (CVE-2026-116779)
Original title: CISA KEV: SignalWire FreeSwitch Code Injection Vulnerability — SignalWire FreeSwitch (CVE-2026-116779)
The flaw can expose configuration and credentials, control calls, and execute commands; action is due November 12.
CISA added CVE-2026-116779, a code injection vulnerability in SignalWire FreeSwitch, to the Known Exploited Vulnerabilities catalog on November 9, 2026. The flaw permits configuration and credential disclosure, arbitrary call control, and command execution. Required action is to apply vendor mitigations in line with BOD 26-04 by November 12, 2026, or discontinue use if mitigations are unavailable. Known ransomware campaign use is listed as unknown.
Unconfirmed: The listing does not name attackers and marks ransomware use as unknown.
- Stakeholders must also follow CISA forensics triage requirements.
- Cloud services must follow applicable BOD 26-04 guidance.
- No affected or fixed version strings are stated.
- Known ransomware campaign use is listed as unknown.
Impact: Configuration and credential disclosure, call control, and command execution
| Product | Affected |
|---|---|
| SignalWire FreeSwitch | — |
- 1.Apply vendor mitigations under BOD 26-04 by November 12, 2026.
- 2.Discontinue use if mitigations are unavailable.
- 3.Evaluate each asset's internet exposure.
- CVEs
- CVE-2026-116779
- Vendors
- SignalWire
- Products
- FreeSwitch
- Organizations
- CISA
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-116779 | Arbitrary command execution in FreeSWITCH sofia_presence_handle_sip_i_message() | 9.8 | 2% | KEVPoC ×2 | KEV |
From the original article
1 min read at cisa.govSignalWire FreeSwitch contains a code injection vulnerability that permits configuration and credential disclosure, arbitrary call control, and command execution. Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes).
cisa.gov
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.