No recent security news found for Kamailio.
| CVE ID | Severity | Patch | EPSS | Date |
|---|---|---|---|---|
| CVE-2026-108822 PoC | 5.3 MEDIUM | UNKNOWN / UNPATCHED | 0.77% | 2026-10-12 |
| CVE-2026-93962 PoC | 8.3 HIGH | PATCH UNDER REVIEW | 0.69% | 2026-09-20 |
| CVE-2026-52022 PoC | 7.5 HIGH | PATCHED / FIX AVAILABLE | 0.58% | 2026-09-01 |
| CVE-2026-52023 PoC | 7.5 HIGH | PATCHED / FIX AVAILABLE | 0.58% | 2026-09-01 |
| CVE-2025-12207 | 4.8 MEDIUM | UNKNOWN / UNPATCHED | 0.21% | 2025-10-27 |
| CVE-2025-12206 | 4.8 MEDIUM | UNKNOWN / UNPATCHED | 0.22% | 2025-10-27 |
| CVE-2025-12205 | 4.8 MEDIUM | UNKNOWN / UNPATCHED | 0.21% | 2025-10-27 |
| CVE-2025-12204 | 4.8 MEDIUM | UNKNOWN / UNPATCHED | 0.27% | 2025-10-27 |
Kamailio is an open-source SIP (Session Initiation Protocol) server widely used for VoIP, instant messaging, and real-time communication infrastructure. It is a fork of the former OpenSER project and is known for its high performance, scalability, and extensive module ecosystem, making it a critical component in many telecommunication and unified communications deployments. From a cybersecurity perspective, its CVE history reflects vulnerabilities in SIP handling and module interactions, which are relevant to securing VoIP networks against attacks like call hijacking and denial of service.
Based on 0 critical CVEs, 0 CISA KEV, 67% unpatched. Model: GDPR Art.83 · not legal advice.