CVE-2026-110679 OpenSIPS CVE debrief

Who should care

Defenders responsible for OpenSIPS deployments should assess exposure and prioritize upgrading to fixed versions. This includes reviewing and updating affected OpenSIPS deployments, monitoring systems for potential exploitation attempts, and verifying affected deployments in managed environments.

Why it matters

Defenders should care about CVE-2026-110679 because it affects OpenSIPS versions up to 3.6.8/4.0.1, allowing remote attackers to exploit the vulnerability without user interaction or privileges. Upgrading to version 3.6.9 or 4.0.2 is recommended to mitigate the out-of-bounds read vulnerability in the rtpproxy component.

• Remote attackers may exploit this vulnerability to read sensitive information
• Successful exploitation requires no user interaction or privileges
• The vulnerability has a CVSS score of 6.9 and is classified as MEDIUM severity

Technical summary

The vulnerability is caused by an out-of-bounds read in the rtpproxy_offer and rtpproxy_answer functions of the rtpproxy component in OpenSIPS. This issue affects OpenSIPS versions up to 3.6.8 and 4.0.1. The vulnerability allows remote attackers to exploit it without user interaction or privileges. Upgrading to version 3.6.9 or 4.0.2 is recommended to mitigate the vulnerability. The vulnerability has a CVSS score of 6.9 and is classified as MEDIUM severity. Defenders should prioritize upgrading OpenSIPS to fixed versions.

Defensive priority

Defenders should prioritize upgrading OpenSIPS to version 3.6.9 or 4.0.2 to mitigate the out-of-bounds read vulnerability in the rtpproxy component.

Recommended defensive actions

• Upgrade OpenSIPS to version 3.6.9 or 4.0.2
• Review and update affected OpenSIPS deployments
• Monitor OpenSIPS systems for potential exploitation attempts
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record and source item provide details on the vulnerability, including its impact on OpenSIPS versions up to 3.6.8/4.0.1 and the availability of fixes in versions 3.6.9 and 4.0.2. The vulnerability affects the rtpproxy_offer and rtpproxy_answer functions of the rtpproxy component. Evidence is limited to source-provided information and CVE metadata. Defenders should verify affected deployments and review official advisories for further details.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.