Security incidents tagged Sip. Newest first.
SignalWire published GitHub advisories for FreeSWITCH, the open-source telephony switch behind FusionPBX and many VoIP platforms. The critical one, CVE-2026-116779 (CVSS 9.8), lets anyone who can get a SIP MESSAGE accepted address it to the api chat proto and have FreeSWITCH run any API command, including system for OS commands and inline Lua where mod_lua is loaded. Inbound chat is on by default, the inbound ACL does not cover MESSAGE, and one registered SIP account (or the stock passwordless default directory user) is enough. The advisory says exploitation has been observed in the wild. It is fixed in 1.11.3 (released Aug 28), which adds an enable-chat-api-proto setting that is off by default. Oct 26 and Oct 28 advisories also cover pre-auth memory bugs in mod_xml_rpc WebSocket handling (CVE-2026-116785, CVSS 9.1), ICE checks accepted without STUN MESSAGE-INTEGRITY (CVE-2026-116790, CVSS 9.1), SIP REFER channel-variable injection leading to command execution (CVE-2026-116786), and overflows in mod_rtmp, MSRP, SDP crypto and the Event Socket, all fixed in 1.11.2. Upgrade to 1.11.3.
SignalWire FreeSWITCHSince Oct 28, 2026
SignalWire patched 3 critical FreeSWITCH vulnerabilities: actively exploited RCE flaw CVE-2026-116779, plus CVE-2026-116785 and CVE-2026-116790. #FreeSWITCH #SignalWire #VoIP #SIP #WebRTC #RCE #Cybersecurity #Vulnerability #InfoSec t.co/MTvj69p4KM
Tinkerer ClubOwn your servers, run your own AI, pay $0/month for software.
Matte3D mockups and screen recordings with pro-level video editing
PostizAgentic social scheduler.
ScreenshotOneThe best screenshot API for developers and agents
ether.fia neobank with a built in ai-connector, build your own frontend to your finance with claude, chatgpt or your LLM of choice! Feedback always 
OpenProseReliable, event-driven multiagent workflows — in Markdown.
OpenTweetAgentic X (Twitter) autopilot.
AppSumo1M+ entrepreneurs use AppSumo to find the best deals on software for their business. One-time payments, lifetime access.
Team Spartan by CONFLICTKnow what matters. Get it fixed. Experience spans high-traffic consumer platforms, cloud infrastructure, and security — built under real ope
Browserless.ioThe web layer your agent runs on.
StrixHack yourself before the bad guys do. Open source (70k+ stars on Github)
Maple VCWe're 3 operators (digitalocean, uber, shopify) turned investors who write first checks into folks with ambition to build global businesses.
RakazoOpen source Grok Bot
The Influencer AIAI influencer generator: create a realistic influencer from traits or your photos, then make photos, talking videos and UGC ads with the sam
PluginboardFind the right plugins for your AI agents. Plugins, skills and step-by-step recipes for Claude, ChatGPT, Grokbot, Muse, Gemini and more.
file.cafeFree, instant file sharing.
LinkDRLink building that works: real backlinks from hundreds of high-DR sites, done for you or self-serve.
OutmanoAI agents that watch your competitors so you don't have to
MixpostSelf-hosted social media scheduler. Pay once.
SynteqThe cloud, built for developers.
Kraken.ioWe optimize your images, to save you bandwidth, make your websites faster, make your customers less frustrated, and reduce your CDN costs.
Open Source AlternativesBest Open Source Alternatives to Paid Software. Type anything and It answers with the right open source alternatives.
WATASUHosting for your vibe-coded app