Source note · FreeSWITCH

Until they can upgrade, the advisory for CVE-2026-45771 suggests limiting affected SIP listeners to trusted networks, or setting manage-presence=false on untrusted profiles, which also disables presence features such as BLF.

Checked 2026-09-24

Vendor: SignalWire
Product: FreeSWITCH
Subsystem: security
Deployment: on-premises, cloud
Region: not restricted
Release range: <= 1.10.12
Checked: 2026-09-24

Sources

Denial-of-Service in SIP PUBLISH Requests via XML Entity Expansion — SignalWire · tier 2 current vendor documentation · Advisory, mitigation section

Cite this note

APA

WarmTransfer. (2026, September 24). FreeSWITCH: source note freeswitch-pbx-publish-xee-mitigation. WarmTransfer. https://warmtransfer.net/knowledge/claims/freeswitch-pbx-publish-xee-mitigation

BibTeX

@misc{warmtransfer-claim-freeswitch-pbx-publish-xee-mitigation,
  title  = {FreeSWITCH: source note freeswitch-pbx-publish-xee-mitigation},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/claims/freeswitch-pbx-publish-xee-mitigation},
  note   = {Source note freeswitch-pbx-publish-xee-mitigation, checked 2026-09-24}
}

Read in context