s
signalwire
Security Risk Profile
99
/100
criticalSecurity Risk Score
Comprehensive risk assessment based on 8 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from October 18, 2021 to present
8
Total CVEs
7
Critical+High
1
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
8.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
99/100
critical
⚠️ 1 Active Exploits🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
3High
4Medium
0Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Command Injection
1
2
OS Command Injection
1
3
Code Injection
1
4
Integer Overflow
1
Most Affected Products
1. alpine/sofia-sip33
2. debian/sofia-sip14
3. ubuntu/sofia-sip7
4. SignalWire Sofia-sip5
5. Debian Debian Linux5
Recent Vulnerabilities
See more →CVE-2026-116779
CVSS 9.8critical
SignalWire FreeSwitch Code Injection Vulnerability
Nov 5, 2026⚠ Exploited
https://seclists.org/oss-sec/2023/q4/328
unknown
[ES2023-02] FreeSWITCH susceptible to Denial of Service via DTLS Hello packets during call initiation
Dec 23, 2023🔧 No Patch
CVE-2023-32307
CVSS 7.5high
heap-over-flow and integer-overflow in sofia-sip
May 26, 2023
CVE-2023-22741
CVSS 9.8critical
heap-over-flow in stun_parse_attribute in sofia-sip
Jan 19, 2023
CVE-2022-31003
CVSS 9.8critical
Heap-based Buffer Overflow and Out-of-bounds Write in Sofia-SIP
May 31, 2022
CVE-2022-31001
CVSS 7.5high
Out-of-bounds Read in Sofia-SIP
May 31, 2022
CVE-2022-31002
CVSS 7.5high
Out-of-bounds Read in Sofia-SIP
May 31, 2022
CVE-2021-36513
CVSS 7.5high
Oct 18, 2021🔧 No Patch
Monitor signalwire in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.