CISA flags actively exploited FreeSWITCH command injection flaw
What happened.The Cybersecurity and Infrastructure Security Agency added an actively exploited remote code execution vulnerability in SignalWire FreeSWITCH to its Known Exploited Vulnerabilities catalog.
Why it matters.FreeSWITCH powers core voice-over-IP networks and carrier session border controllers. When SIP headers invoke administrative execution pathways without authentication, network intruders gain root shell execution and tap call audio. Infrastructure engineers must deploy FreeSWITCH 1.11.3 immediately. Operators without maintenance windows should disable inbound SIP chat handling across active Sofia profiles.