VulnSocial

CVE-2026-93962Patch

LOWCVSS 5.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A weakness has been identified in Kamailio up to 5.8.8/6.0.7/6.1.4/6.2.0-dev1. The impacted element is the function shm_malloc of the file src/modules/cdp/receiver.c of the component CDP Diameter Receiver. Executing a manipulation can lead to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 6.0.8 is sufficient to resolve this issue. This patch is called 38711a3e788de0130d48cb485578c482b57d9351/4f62235b6f477b649c5cc18b0c81b4e26c949b98/4f62235b6f477b649c5cc18b0c81b4e26c949b98. You should upgrade the affected component.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-119CWE-122

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 3 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-09-20); latest day: 1
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-09-20: 2Mentions · 2026-10-30: 1Patch / Workaround · 2026-09-20: 1Patch / Workaround · 2026-10-30: 1Technical Details · 2026-09-20: 2Technical Details · 2026-10-30: 109-2010-30
Signal classification2 categories
Patch
266.7%
Disclosure
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-09-202
Disclosure1Patch1
2026-10-301
Patch1
Full discourse3 posts
  • Hugo | DevOps | Cybersecurity@HugoValters
    Patch

    CVE-2026-93962 Kamailio CDP Diameter receiver heap buffer overflow, remotely exploitable, public exploit out. CVSS 8.3. No official patch yet; upgrade to 6.0.8 resolves it. Patch now. #CVE #infosec #Kamailio https://www.valtersit.com/cve/CVE-2026-93962 #Kamailio #CVEALERT #CVE #infosec #Linux #XSS #valtersit #snippet #SysAdmin #cybersecurity #devsecops #devops #developer #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #cybersecurityawareness #cybersecuritynews #cybersecuritytips #python #hacker #kali #ubuntu #debian #docker

    Post summary

    The text discloses CVE-2026-93962 as a remotely exploitable Kamailio heap buffer overflow (CVSS 8.3), notes no official patch yet but that upgrading to 6.0.8 resolves it, and calls for patching, while not providing a named exploit tool or evidence of active in-the-wild exploitation.

    0000026
    1.1K followersView on X
  • ADK Cyber@ADKCyber
    Patch

    CVE-2026-93962 (CVSS 8.3) affects Kamailio up to 5.8.8/6.0.7/6.1.4. Review and update if using the CDP module. https://nvd.nist.gov/vuln/detail/CVE-2026-93962 via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning https://t.co/ANBZKdg0Q5

    Post summary

    The text announces CVE-2026-93962 (CVSS 8.3) affecting Kamailio and advises users of the CDP module to review and update to patched versions. A patch/remediation is explicitly mentioned.

    0000031
    97 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-93962 A weakness has been identified in Kamailio up to 5.8.8/6.0.7/6.1.4/6.2.0-dev1. The impacted element is the function shm_malloc of the file src/modules/cdp/receiver.c … https://www.cve.org/CVERecord?id=CVE-2026-93962

    Post summary

    The text is a brief disclosure of CVE-2026-93962, identifying a weakness in Kamailio's shm_malloc function with specific file/version details, but providing no exploit code, PoC, remediation guidance, or severity assessment.

    000001.0K
    58.1K followersView on X

Explore more

Back to dashboard