[CVE-2026-108822 ] Published: Oct 12, 2026, 10:00:16 AM UTC
A vulnerability was detected in Kamailio up to 6.0.7/6.1.3. The affected element is the function isup_get_calling_party of the file src/modules/sipt/ss7_parser.c of the component sipt Module. The mani
Medium(6.9) Affected Details (2) 5.6.3-2 · amd64 · bookworm
Affected
nvd · kamailio · debian · bookworm
5.6.3-2 · arm64 · bookworm
Affected
nvd · kamailio · debian · bookworm
[CVE-2026-93962 ] Published: Sep 20, 2026, 5:16:29 AM UTC
A weakness has been identified in Kamailio up to 5.8.8/6.0.7/6.1.4/6.2.0-dev1. The impacted element is the function shm_malloc of the file src/modules/cdp/receiver.c of the component CDP Diameter Rece
Medium(5.5) Affected Details (2) 5.6.3-2 · amd64 · bookworm
Affected
nvd · kamailio · debian · bookworm; nvd · kamailio · debian · 12
5.6.3-2 · arm64 · bookworm
Affected
nvd · kamailio · debian · bookworm; nvd · kamailio · debian · 12
[CVE-2026-52023 ] Published: Sep 1, 2026, 6:17:43 PM UTC
An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the ims_registrar_pcscf module, specifically the pcscf_save_pending/save_pending path and security-agr
High(7.5) Affected Details (2) 5.6.3-2 · amd64 · bookworm
Affected
nvd · kamailio · debian · bookworm; nvd · kamailio · debian · 12
5.6.3-2 · arm64 · bookworm
Affected
nvd · kamailio · debian · bookworm; nvd · kamailio · debian · 12
[CVE-2026-52022 ] Published: Sep 1, 2026, 6:17:43 PM UTC
An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the IMS P-CSCF registration handling components
High(7.5) Affected Details (2) 5.6.3-2 · amd64 · bookworm
Affected
nvd · kamailio · debian · bookworm; nvd · kamailio · debian · 12
5.6.3-2 · arm64 · bookworm
Affected
nvd · kamailio · debian · bookworm; nvd · kamailio · debian · 12
[CVE-2026-82608 ] Published: Aug 31, 2026, 3:16:43 AM UTC
A vulnerability was determined in Kamailio up to 5.5.0/6.0.7. This affects the function get_4bytes of the file src/modules/ims_registrar_scscf/cxdx_avp.c of the component AVP Handler. Executing a mani
Low(2.1) Affected Details (2) 5.6.3-2 · amd64 · bookworm
Affected
nvd · kamailio · debian · bookworm; nvd · kamailio · debian · 12
5.6.3-2 · arm64 · bookworm
Affected
nvd · kamailio · debian · bookworm; nvd · kamailio · debian · 12
[CVE-2026-39863 ] Published: Apr 8, 2026, 8:16:26 PM UTC
Kamailio is an open source implementation of a SIP Signaling Server. Prior to 6.1.1, 6.0.6, and 5.8.8, an out-of-bounds access in the core of Kamailio (formerly OpenSER and SER) allows remote attacker
High(7.5) Affected Details (2) 5.6.3-2 · amd64 · bookworm
Affected
nvd · kamailio · debian · bookworm; nvd · kamailio · debian · 12
5.6.3-2 · arm64 · bookworm
Affected
nvd · kamailio · debian · bookworm; nvd · kamailio · debian · 12
[CVE-2026-39864 ] Published: Apr 8, 2026, 8:16:00 PM UTC
Kamailio is an open source implementation of a SIP Signaling Server. Prior to 6.0.5 and 5.8.7, an out-of-bounds read in the auth module of Kamailio (formerly OpenSER and SER) allows remote attackers t
Medium(4.4) Affected Details (2) 5.6.3-2 · amd64 · bookworm
Affected
nvd · kamailio · debian · bookworm; nvd · kamailio · debian · 12
5.6.3-2 · arm64 · bookworm
Affected
nvd · kamailio · debian · bookworm; nvd · kamailio · debian · 12
[CVE-2025-12207 ] Published: Oct 27, 2025, 3:15:49 AM UTC
kamailio: CVE-2025-12207
Low(1.9) Affected Details (2) 5.6.3-2 · amd64 · bookworm
Affected
dsa · kamailio · debian · bookworm; dsa · kamailio · debian · 12
5.6.3-2 · arm64 · bookworm
Affected
dsa · kamailio · debian · bookworm; dsa · kamailio · debian · 12
[CVE-2025-12206 ] Published: Oct 27, 2025, 3:15:49 AM UTC
kamailio: CVE-2025-12206
Low(1.9) Affected Details (2) 5.6.3-2 · amd64 · bookworm
Affected
dsa · kamailio · debian · bookworm; dsa · kamailio · debian · 12
5.6.3-2 · arm64 · bookworm
Affected
dsa · kamailio · debian · bookworm; dsa · kamailio · debian · 12
[CVE-2025-12205 ] Published: Oct 27, 2025, 3:15:49 AM UTC
kamailio: CVE-2025-12205
Low(1.9) Affected Details (2) 5.6.3-2 · amd64 · bookworm
Affected
dsa · kamailio · debian · bookworm; dsa · kamailio · debian · 12
5.6.3-2 · arm64 · bookworm
Affected
dsa · kamailio · debian · bookworm; dsa · kamailio · debian · 12
[CVE-2025-12204 ] Published: Oct 27, 2025, 3:15:49 AM UTC
kamailio: CVE-2025-12204
Low(1.9) Affected Details (2) 5.6.3-2 · amd64 · bookworm
Affected
dsa · kamailio · debian · bookworm; dsa · kamailio · debian · 12
5.6.3-2 · arm64 · bookworm
Affected
dsa · kamailio · debian · bookworm; dsa · kamailio · debian · 12
[CVE-2020-27507 ] Published: Mar 15, 2023, 8:15:00 PM UTC
kamailio: CVE-2020-27507
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:50:36 PM UTC
Details (2) 5.6.3-2 · amd64 · bookworm
Fixed · Fixed: 5.4.2-1
dsa · kamailio · debian · bookworm; dsa · kamailio · debian · 12
5.6.3-2 · arm64 · bookworm
Fixed · Fixed: 5.4.2-1
dsa · kamailio · debian · bookworm; dsa · kamailio · debian · 12
[CVE-2020-28361 ] Published: Nov 18, 2020, 2:15:00 PM UTC
kamailio: CVE-2020-28361
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:51:07 PM UTC
Details (2) 5.6.3-2 · amd64 · bookworm
Fixed · Fixed: 5.4.0-1
dsa · kamailio · debian · bookworm; dsa · kamailio · debian · 12
5.6.3-2 · arm64 · bookworm
Fixed · Fixed: 5.4.0-1
dsa · kamailio · debian · bookworm; dsa · kamailio · debian · 12
[CVE-2018-16657 ] Published: Sep 7, 2018, 2:29:00 PM UTC
kamailio: CVE-2018-16657
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:35:06 PM UTC
Details (2) 5.6.3-2 · amd64 · bookworm
Fixed · Fixed: 5.1.4-1
dsa · kamailio · debian · bookworm; dsa · kamailio · debian · 12
5.6.3-2 · arm64 · bookworm
Fixed · Fixed: 5.1.4-1
dsa · kamailio · debian · bookworm; dsa · kamailio · debian · 12
[CVE-2018-14767 ] Published: Jul 31, 2018, 6:29:00 AM UTC
kamailio: CVE-2018-14767
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:34:53 PM UTC
Details (2) 5.6.3-2 · amd64 · bookworm
Fixed · Fixed: 5.1.4-1
dsa · kamailio · debian · bookworm; dsa · kamailio · debian · 12
5.6.3-2 · arm64 · bookworm
Fixed · Fixed: 5.1.4-1
dsa · kamailio · debian · bookworm; dsa · kamailio · debian · 12
[CVE-2018-8828 ] Published: Mar 20, 2018, 8:29:00 PM UTC
kamailio: CVE-2018-8828
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:37:57 PM UTC
Details (2) 5.6.3-2 · amd64 · bookworm
Fixed · Fixed: 5.1.2-1
dsa · kamailio · debian · bookworm; dsa · kamailio · debian · 12
5.6.3-2 · arm64 · bookworm
Fixed · Fixed: 5.1.2-1
dsa · kamailio · debian · bookworm; dsa · kamailio · debian · 12
[CVE-2015-1590 ] Published: Sep 7, 2017, 2:29:00 PM UTC
kamailio: CVE-2015-1590
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:14:26 PM UTC
Details (2) 5.6.3-2 · amd64 · bookworm
Fixed · Fixed: 4.2.0-2
dsa · kamailio · debian · bookworm; dsa · kamailio · debian · 12
5.6.3-2 · arm64 · bookworm
Fixed · Fixed: 4.2.0-2
dsa · kamailio · debian · bookworm; dsa · kamailio · debian · 12
[CVE-2013-7426 ] Published: Aug 29, 2017, 8:29:00 PM UTC
kamailio: CVE-2013-7426
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:09:31 PM UTC
Details (2) 5.6.3-2 · amd64 · bookworm
Fixed · Fixed: 4.0.2-1
dsa · kamailio · debian · bookworm; dsa · kamailio · debian · 12
5.6.3-2 · arm64 · bookworm
Fixed · Fixed: 4.0.2-1
dsa · kamailio · debian · bookworm; dsa · kamailio · debian · 12
[CVE-2015-1591 ] Published: Jun 27, 2017, 8:29:00 PM UTC
kamailio: CVE-2015-1591
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:14:26 PM UTC
Details (2) 5.6.3-2 · amd64 · bookworm
Fixed · Fixed: 4.2.0-2
dsa · kamailio · debian · bookworm; dsa · kamailio · debian · 12
5.6.3-2 · arm64 · bookworm
Fixed · Fixed: 4.2.0-2
dsa · kamailio · debian · bookworm; dsa · kamailio · debian · 12
[CVE-2016-2385 ] Published: Mar 29, 2016, 12:00:00 AM UTC
kamailio: CVE-2016-2385
Medium Unknown Matching against OpenFactory catalog package versions is in progress. Observed: Oct 23, 2026, 5:20:13 PM UTC
Details (2) 5.6.3-2 · amd64 · bookworm
Fixed · Fixed: 4.3.4-2
dsa · kamailio · debian · bookworm; dsa · kamailio · debian · 12
5.6.3-2 · arm64 · bookworm
Fixed · Fixed: 4.3.4-2
dsa · kamailio · debian · bookworm; dsa · kamailio · debian · 12