CVE-2026-82608PoC

LOWCVSS 2.1 · LOW

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

A vulnerability was determined in Kamailio up to 5.5.0/6.0.7. This affects the function get_4bytes of the file src/modules/ims_registrar_scscf/cxdx_avp.c of the component AVP Handler. Executing a manipulation can lead to out-of-bounds read. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. This patch is called abb5d60af6eefbd367bf6588c5589566b090e272. It is advisable to implement a patch to correct this issue. The vendor points out, that "[v]ersion 5.5.0 is old and not maintained anymore."

Back to dashboard

1.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-119CWE-125

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Threat summary

Public PoC is present in monitored signal
1 mentions across 1 observed day

What's happening

PoC mentioned or linked in 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

PoC

1100.0%

Full discourse1 post

Bussio28Team | Ciberseguridad sin humo@Bussio28Team46d
PoC
Si tienes #Kamailio en producción, hoy merece la pena revisar versión. CVE-2026-82608 ya tiene PoC público y permite provocar una lectura fuera de límites de forma remota. No parece un incendio, pero tampoco de esas cosas que dejaría para “ya lo miraré”. #Ciberseguridad
Post summary
CVE-2026-82608 affecting Kamailio has a publicly available PoC demonstrating a remote out‑of‑bounds read; no active exploitation or patches have been reported.
0000069
74 followersView on X

Explore more

Back to dashboard