Is CVE-2026-110679 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-110679?

CVE-2026-110679 has a CVSS v3 severity of HIGH (7.3).

Back

CVE-2026-110679

Description

A vulnerability was determined in OpenSIPS up to 3.6.8/4.0.1. The impacted element is the function rtpproxy_offer/rtpproxy_answer of the component rtpproxy. This manipulation causes out-of-bounds read. The attack may be initiated remotely. Upgrading to version 3.6.9 and 4.0.2 is sufficient to resolve this issue. It is advisable to upgrade the affected component.