k
kamailio
Security Risk Profile
42
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 28 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 12, 2013 to present
28
Total CVEs
11
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
6.5
Base severity
Avg EPSS
1%
Exploit probability
Unpatched
1
Critical/High
Risk Level
42/100
medium
📈 1 in Last 30 Days
Severity Distribution
Critical
6High
5Medium
4Low
5Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
9
2
Null Pointer Dereference
3
3
Input Validation
2
4
Double Free
1
5
Use After Free
1
Most Affected Products
1. kamailio Kamailio41
2. debian/kamailio15
3. Debian Debian Linux7
4. Dnsmasq Dnsmasq5
5. The Dnsmasq Project dnsmasq2
Recent Vulnerabilities
See more →CVE-2026-108822
CVSS 6.9medium
Kamailio sipt ss7_parser.c isup_get_calling_party buffer overflow
Oct 12, 2026
CVE-2026-93962
CVSS 5.5EPSS 1%medium
Kamailio CDP Diameter Receiver receiver.c shm_malloc heap-based overflow
Sep 20, 2026
CVE-2026-52022
CVSS 7.5high
Sep 1, 2026
CVE-2026-52023
CVSS 7.5high
Sep 1, 2026
CVE-2026-82608
CVSS 2.1low
Kamailio AVP cxdx_avp.c get_4bytes out-of-bounds
Aug 31, 2026🔧 No Patch
CVE-2026-39864
CVSS 4.9medium
Kamailio Auth: Processing Vulnerability For Additional Authenticated User Identity Checks
Apr 8, 2026🔧 No Patch
CVE-2026-39863
CVSS 7.5high
Kamailio Core: TCP Data Processing Vulnerability
Apr 8, 2026🔧 No Patch
https://seclists.org/oss-sec/2025/q4/156
unknown
Questionable CVE's ported against dnsmasq
Nov 6, 2025🔧 No Patch
https://seclists.org/oss-sec/2025/q4/153
unknown
Questionable CVE's ported against dnsmasq
Nov 5, 2025🔧 No Patch
https://seclists.org/oss-sec/2025/q4/144
unknown
Questionable CVE's ported against dnsmasq
Nov 5, 2025🔧 No Patch
Monitor kamailio in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.