CVE-2026-49843

Name of the Vulnerable Software and Affected Versions FreeSWITCH versions prior to 1.11.1

Description In the mod verto module, the JSON-RPC handler binds the connection to the client-supplied sessid during the first frame before the authentication gate. This binding process inserts the connection into the global session hash. If a key collision occurs, the previous occupant of that slot is dropped, which triggers a verto.punt, detaches its calls, and closes its socket. An unauthenticated network attacker with knowledge of a target session UUID can use this mechanism to evict a legitimate client.

Recommendations Update to version 1.11.1.