CVE-2026-113380Critical· 9.3▾ MidnightIn the RingRTC library before 2.72.0 for Signal, a peer that saturates a call's FSM queue can interfere with the ability of a local hangup to tear the call (with its audio and perhaps also video track) down.
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 51.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
In the RingRTC library before 2.72.0 for Signal, a peer that saturates a call's FSM queue can interfere with the ability of a local hangup to tear the call (with its audio and perhaps also video track) down.
RingRTC < 2.72.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-48741High· 7.5libIEC61850: Remote NULL dereference in MMS Read alternate-access sub-array path leads to server-side DoS
CVE-2026-100352High· 7.5kin-openapi is a Go project for handling OpenAPI files
CVE-2026-109855High· 7.5undici is an HTTP client library for Node.js
CVE-2025-69420High· 7.5Missing ASN1_TYPE validation in TS_RESP_verify_response() function
CVE-2026-0262Medium· 6.6PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing
CVE-2026-22795Medium· 5.5Missing ASN1_TYPE validation in PKCS#12 parsing