rootpwn

high · CVSS v3 8.3 · CVSS v4 6.9 · EPSS 0.00529

CVE-2026-93962

Kamailio's CDP Diameter Receiver module contains a heap-based buffer overflow in the shm_malloc function. The flaw can be triggered remotely

Overview

Kamailio's CDP Diameter Receiver module contains a heap-based buffer overflow in the shm_malloc function. The flaw can be triggered remotely and is publicly available. Upgrading to version 6.0.8 or later resolves the issue.

Description

A weakness has been identified in Kamailio up to 5.8.8/6.0.7/6.1.4/6.2.0-dev1. The impacted element is the function shm_malloc of the file src/modules/cdp/receiver.c of the component CDP Diameter Receiver. Executing a manipulation can lead to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 6.0.8 is sufficient to resolve this issue. This patch is called 38711a3e788de0130d48cb485578c482b57d9351/4f62235b6f477b649c5cc18b0c81b4e26c949b98/4f62235b6f477b649c5cc18b0c81b4e26c949b98. You should upgrade the affected component.

Impact

The vulnerability allows attackers to overflow heap memory, potentially leading to arbitrary code execution or denial of service. This compromises confidentiality, integrity, and availability of SIP servers running affected Kamailio versions. Network operators and service providers deploying these versions are at risk.

Remediation

Apply the official patch by upgrading to Kamailio 6.0.8 or later. If an upgrade is not immediately possible, restrict inbound Diameter traffic to trusted peers and monitor for abnormal memory usage. Disable the CDP module if it is not required.

Risk context

Severity is high with CVSS v3 score 8.3 and a low EPSS of 0.00529, indicating a moderate likelihood of exploitation but significant impact if triggered. Defenders should prioritize patching as soon as possible.

Affected products

  • Kamailio 5.8.8
  • Kamailio 6.0.7
  • Kamailio 6.1.4
  • Kamailio 6.2.0-dev1

Scores

Severity
high
CVSS v2
7.5
CVSS v3
8.3
CVSS v4
6.9
EPSS
0.00529

heap-overflow kamailio diameter remote-exploit high-severity public-poc patch network-security

← All CVEs

Related CVEs

high

CVE-2026-93974

A flaw has been found in SourceCodester Online Reviewer Management System 1.0. This affects an unknown function of the file /reviewer_0/admins/assessments/databank/btn_functions.php?action=remove. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used.

View analysis

high

CVE-2026-92252

Incorrect default permissions in the installation directory of WatchDog Anti-Virus on Windows allow local, low-privileged users to modify, replace, or delete antivirus binaries and configuration files, because the installer grants the Users group Full Control over C:\Program Files (x86)\Watchdog Anti-Virus. This may disable antivirus protection or enable privileged code execution if modified binaries are loaded by an elevated WatchDog process.

View analysis

high

CVE-2026-92253

Improper link resolution before file access in the quarantine restoration process of WatchDog Anti-Virus 1.8.640 on Windows allows local, low-privileged attackers to cause a quarantined file to be written to an arbitrary filesystem location by creating a directory junction at the original file path and persuading an administrator to restore the file. This may enable modification of protected files or SYSTEM-level code execution through DLL hijacking.

View analysis

high

CVE-2026-92254

Missing Authorization in the IOCTL handlers of the wsdkd.sys kernel drivers in Watchdog WatchDog Antivirus 1.8.640 (driver versions 1.3.0.0 and earlier) on Microsoft Windows allows local, low-privileged attackers to delete arbitrary files with SYSTEM privileges, bypassing NTFS access controls and potentially disabling security products or destabilizing the operating system, via crafted IOCTL requests sent to the \Device\wsdk device.

View analysis