CVE-2026-116785

{
  "etk_id": "ETK-2026-3070",
  "cve_id": "CVE-2026-116785",
  "display_id": "CVE-2026-116785",
  "ghsa_id": "GHSA-jj89-q47c-gh94",
  "euvd_id": null,
  "status": "published",
  "anchor_state": "awaiting_cve",
  "title": "FreeSWITCH mod_xml_rpc WebSocket heap out-of-bounds write",
  "summary": "FreeSWITCH deployments using mod_xml_rpc with its WebSocket endpoint enabled can be affected by malformed WebSocket frame length handling. An unauthenticated network client that can connect to the endpoint may crash the service or corrupt its memory state.",
  "mitigation": "Upgrade FreeSWITCH to >= 1.11.2 or later.",
  "vendor": "c",
  "product": "c:FreeSWITCH",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "<= 1.11.1"
      ],
      "ecosystem": "c",
      "fixed_versions": [
        ">= 1.11.2"
      ],
      "package_name": "FreeSWITCH",
      "purl": null
    }
  ],
  "cwes": [
    122
  ],
  "cvss_score": 9.1,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "deterministic",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 66.88166188333334,
  "t0_at": null,
  "signals": {
    "trigger_signal": {
      "at": "2026-10-28T16:50:33+00:00",
      "days": -1.9404831875462962,
      "is_lower_bound": true,
      "measured_at": "2026-10-30T15:24:50.811147+00:00",
      "url": "https://github.com/signalwire/freeswitch/security/advisories/GHSA-jj89-q47c-gh94"
    }
  }
}