CVE-2026-93857

CVSS 9.2 (critical) · published 2026-10-27

A stack-based buffer overflow vulnerability in Fireware OS's SIP proxy allows a remote, unauthenticated attacker to execute arbitrary code by sending a specially crafted request through a policy that uses the SIP proxy.

Weakness: CWE-120, CWE-121, CWE-787

Source: NVD CVE-2026-93857

References

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.