Freeswitch — known CVE vulnerabilities

Every CVE whose affected-product data names Freeswitch, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (21)

• CVE-2019-19492 — CVSS 9.8 (critical): FreeSWITCH 1.6.10 through 1.10.1 has a default password in event_socket.conf.xml.
• CVE-2026-49841 — CVSS 9.8 (critical): FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software…
• CVE-2026-49840 — CVSS 9.1 (critical): FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software…
• CVE-2021-41145 — CVSS 8.6 (high): FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software…
• CVE-2021-41105 — CVSS 7.5 (high): FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software…
• CVE-2026-49847 — CVSS 7.5 (high): FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software…
• CVE-2026-49842 — CVSS 7.5 (high): FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software…
• CVE-2023-40018 — CVSS 7.5 (high): FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software…
• CVE-2023-40019 — CVSS 7.5 (high): FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software…
• CVE-2023-51443 — CVSS 7.5 (high): FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software…
• CVE-2026-45771 — CVSS 7.5 (high): FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software…
• CVE-2026-49475 — CVSS 7.5 (high): FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software…
• CVE-2015-7392 — CVSS 7.5 (high): Heap-based buffer overflow in the parse_string function in libs/esl/src/esl_json.c in FreeSWITCH before 1.4.23 and 1.6.x before 1.6.2…
• CVE-2018-19911 — CVSS 7.5 (high): FreeSWITCH through 1.8.2, when mod_xml_rpc is enabled, allows remote attackers to execute arbitrary commands via the api/system or…
• CVE-2021-37624 — CVSS 7.5 (high): FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software…
• CVE-2013-2238 — CVSS 6.8 (medium): Multiple buffer overflows in the switch_perform_substitution function in switch_regex.c in FreeSWITCH 1.2 allow remote attackers to cause a…
• CVE-2021-41158 — CVSS 5.8 (medium): FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software…
• CVE-2026-49472 — CVSS 5.3 (medium): FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software…
• CVE-2026-49843 — CVSS 5.3 (medium): FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software…
• CVE-2021-41157 — CVSS 5.3 (medium): FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software…
• CVE-2026-49848 — CVSS 4.3 (medium): FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software…