CVE-2026-116779

Hunt FreeSWITCH CVE-2026-116779: SIP MESSAGE api Proto Audit Lab

your PBX takes orders by text message: hunting FreeSWITCH CVE-2026-116779 before someone else does

Cybersecsloth Editorial14 hours ago09 mins

An accepted SIP MESSAGE could select the api chat proto and run FreeSWITCH API commands on builds up to 1.11.2. Exploited per SignalWire, on KEV since November 9. A lab audit of version, profiles, directory users, and logs.

Read Full News

Able2Shell: N-able Takes N-central Offline After 30+ Zero-Days Go Public, No CVE or Hotfix Yet

IBM Aspera Faspex 5 User-to-Admin Privilege Escalation Added to CISA KEV (CVE-2026-123218)

“yes, and don’t ask again”: Claude Code saved the password, GitHub got a copy, and a bot closed the bug report

no, you did not win three months of Grok Heavy and a SpaceX share. you won an MFA-bypassing phish.

Iris Plaza says a cloud service held data on 7.7 million people, and someone else may have it now

your PBX takes orders by text message: hunting FreeSWITCH CVE-2026-116779 before someone else does

GPUStack gave admin to anything that looked like localhost. behind a same-host proxy, everything does (CVE-2026-102895, on KEV)

a security researcher’s AI agent walked out of the sandbox and into WorkOS

OpenAI says GPT-6 Cyber found 81 Firefox bugs and 948 Linux paths to root. the model is not public.

that free PlayStation card is a survey mill, and CTM360 counted more than a thousand of them

your PBX takes orders by text message: hunting FreeSWITCH CVE-2026-116779 before someone else does