CVE-2026-45537

OpenSIPS is a Session Initiation Protocol (SIP) server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the construct_uri() function concatenates multiple URI components (protocol, username, domain, port, params) into a fixed 1024-byte global BSS buffer without any bounds checking. When a routing script calls construct_uri() with an attacker-controlled username, a combined component length exceeding 1024 bytes overflows the buffer, corrupting adjacent global data with attacker-controlled content. The overflow reaches disable_503_translation, a global flag controlling SIP 503 response handling, allowing an attacker to deterministically set the flag via the URI username and alter the server's routing behavior for subsequent messages. Because the same buffer is shared with contact_builder(), the overflow also corrupts that function's data, and without a memory sanitizer the adjacent globals are silently overwritten on every request containing a long username. This issue has been fixed in versions 3.6.6 and 4.0.0-rc1.

• CWE-120

• https://github.com/OpenSIPS/opensips/commit/4d23613b65579b073784a07a65d3bf52443a4efb
• https://github.com/OpenSIPS/opensips/commit/5f103effaf5f372cccffe0b138f16998eba12668
• https://github.com/OpenSIPS/opensips/security/advisories/GHSA-v7h4-fwrc-c66v
• https://github.com/OpenSIPS/opensips/security/advisories/GHSA-v7h4-fwrc-c66v

Published

Aug 4, 2026

Last Modified

Aug 5, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-4552A vulnerability was determined in Tenda F453 1.0.0.3. This i…8.8
• CVE-2026-4553A vulnerability was identified in Tenda F453 1.0.0.3. Impact…8.8
• CVE-2026-45533DataEase is an open source data visualization and analysis t…8.3
• CVE-2026-45534DataEase is an open source data visualization and analysis t…9
• CVE-2026-45535DataEase is an open source data visualization and analysis t…8.7
• CVE-2026-45536Netty is a network application framework for development of …4
• CVE-2026-45538OpenSIPS is a Session Initiation Protocol (SIP) server imple…9.8
• CVE-2026-45539Microsoft APM is an open-source, community-driven dependency…7.4
• CVE-2026-4554A security flaw has been discovered in Tenda F453 1.0.0.3. T…8.8
• CVE-2026-45541ESF-IDF is the Espressif Internet of Things (IOT) Developmen…7.5
• CVE-2026-45542ESF-IDF is the Espressif Internet of Things (IOT) Developmen…7.1
• CVE-2026-45543Nextcloud is an open source content collaboration platform. …5.3