Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Kamailio is an open source implementation of a SIP Signaling Server. Prior to 6.0.5 and 5.8.7, an out-of-bounds read in the auth module of Kamailio (formerly OpenSER and SER) allows remote attackers to cause a denial of service (process crash) via a specially crafted SIP packet if a successful user authentication without a database backend is followed by additional user identity checks. This vulnerability is fixed in 6.0.5 and 5.8.7.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-39864 Out-of-Bounds Read Denial of Service in Kamailio Prior to 6.0.5 and 5.8.7 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-39864
Post summary
This entry announces CVE-2026-39864, an out-of-bounds read denial-of-service vulnerability in Kamailio affecting versions prior to 6.0.5 and 5.8.7, without providing PoC, exploitation, or patch details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | kamailio | kamailio | - | - | - |