CVE-2026-116789

Name of the Vulnerable Software and Affected Versions FreeSWITCH versions prior to 1.11.2

Description The dtls state setup() function fails to compare a peer certificate with the SDP a=fingerprint when the software acts as the DTLS server. This allows an unauthenticated peer with access to the negotiated media port to complete the DTLS-SRTP handshake using an unrelated certificate. Consequently, the attacker can obtain SRTP keys, decrypt and inject media, and displace the legitimate endpoint. For ICE-enabled legs, the attacker also requires connectivity-check credentials from the SDP. WebRTC and SIP DTLS-SRTP legs are affected when the peer assumes the active role.

Recommendations Update to version 1.11.2 and set rtp dtls client cert verify mode=fingerprint.