CVE-2026-116786 - FreeSWITCH: Channel-variable injection via SIP REFER leads to command execution in mod_sofia
CVE ID :CVE-2026-116786 Published : Nov. 5, 2026, 8:17 p.m. | 51 minutes ago Description :FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2,...