PatchTheCVEkamailio vulnerabilities and fixes
Recent CVEs affecting kamailio, with upgrade or downgrade steps. 2 tracked.
kamailio has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-09-01. Highest priority: CVE-2026-52022 (score 48/100).
- CVE-2026-52023 HIGH 7.5 UPGRADE An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the ims_regi
- CVE-2026-52022 HIGH 7.5 UPGRADE An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the IMS P-CS
FAQ
How do I fix kamailio vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is kamailio being exploited right now?
None of the tracked kamailio CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which kamailio CVE should I patch first?
CVE-2026-52022 currently ranks highest (48/100): An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the IMS P-CS.