CVE-2026-108822Medium· 5.3▾ SunlitA vulnerability was detected in Kamailio up to 6.0.7/6.1.3. The affected element is the function isup_get_calling_party of the file src/modules/sipt/ss7_parser.c of the component sipt Module. The manipulation of the argument length resul…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A vulnerability was detected in Kamailio up to 6.0.7/6.1.3. The affected element is the function isup_get_calling_party of the file src/modules/sipt/ss7_parser.c of the component sipt Module. The manipulation of the argument length results in buffer overflow. The attack may be performed from remote. Upgrading to version 6.0.8 and 6.1.4 is sufficient to fix this issue. The patch is identified as 3667bebf8d0bea07ed16218fd921d07db87aeb21. Upgrading the affected component is advised.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-11653High· 8.8A vulnerability was determined in UTT HiPER 2620G up to 3.1.4
CVE-2025-12322High· 8.8A flaw has been found in Tenda CH22 1.0.0.1
CVE-2025-12240High· 8.8A security vulnerability has been detected in TOTOLINK A3300R 17.0.0cu.557_B20221024
CVE-2025-12239High· 8.8A weakness has been identified in TOTOLINK A3300R 17.0.0cu.557_B20221024
CVE-2025-12233High· 8.8A flaw has been found in Tenda CH22 1.0.0.1
CVE-2025-12235High· 8.0A vulnerability was found in Tenda CH22 1.0.0.1