Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 274/275 feeds/APIs · 468/469 docs · 8/9 advisories · checked 02:22 UTC Customize Public modeDiscuss ChangeIntel on Discord

SIPSorcery: Malformed UDP packet on the RTP/ICE socket can remotely terminate a media session (DoS)

cve-program · CVE-2026-54632

Published

sipsorcery

Vendor product

Original vendor version evidence · not evaluated as a NuGet range
{
                    "vendor": "sipsorcery-org",
                    "product": "sipsorcery",
                    "versions": [
                        {
                            "version": "< 10.0.9",
                            "status": "affected"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON

euvd · EUVD-2026-78055

Published

EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON.

Original publisher date fields

datePublished: Sep 14, 2026, 7:58:30 PM

dateUpdated: Sep 15, 2026, 2:43:28 PM

No normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.

Original source record · Cite this exact observation · Complete original publisher JSON

nvd · CVE-2026-54632

Published

NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON.

Source analysis status: Deferred

Weakness classifications: CWE-20 · CWE-755

Original publisher date fields

published: 2026-09-14T20:16:47.010

lastModified: 2026-09-30T17:51:56.193

No normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.

Original source record · Cite this exact observation · Complete original publisher JSON

osv · GHSA-28gm-jrmw-xx93

Published

SIPSorcery

NuGet

ECOSYSTEM · introduced 0 → fixed 10.0.9

110 explicitly affected versions

1.3.0-PRE, 1.3.1, 1.4.0, 1.4.1, 1.5.0, 1.5.2, 1.5.3, 1.5.5, 1.5.6, 1.6.0, 1.6.1, 1.6.2, 10.0.1, 10.0.2, 10.0.3, 10.0.4-pre, 10.0.5, 10.0.6, 10.0.7, 10.0.8, 2.0.0, 2.0.1, 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.1.0, 3.2.0, 3.3.0, 3.4.0, 3.5.0, 3.6.0, 4.0.0-rc, 4.0.1-rc, 4.0.13-pre, 4.0.2-rc, 4.0.28-pre, 4.0.29-pre, 4.0.3-rc, 4.0.30-pre, 4.0.31-pre, 4.0.32-pre, 4.0.33-pre, 4.0.34-pre, 4.0.35-pre, 4.0.4-rc, 4.0.40-pre, 4.0.41-pre, 4.0.42-pre, 4.0.43-pre, 4.0.44-pre, 4.0.45-pre, 4.0.46-pre, 4.0.47-pre, 4.0.49-pre, 4.0.50-pre, 4.0.51-pre, 4.0.55-pre, 4.0.58-pre, 4.0.59-pre, 4.0.60-pre, 4.0.7-rc, 4.0.8-rc, 5.1.0, 5.1.1, 5.1.2, 5.1.4-pre, 5.1.5-pre, 5.1.6-pre, 5.1.7-pre, 5.1.8-pre, 5.2.0, 5.2.3, 5.3.0-pre, 5.3.3-pre, 6.0.1-pre, 6.0.11, 6.0.12, 6.0.2, 6.0.3, 6.0.4, 6.0.6, 6.0.7, 6.0.8, 6.0.9, 6.1.0-pre, 6.1.1-pre, 6.2.0, 6.2.1, 6.2.3, 6.2.4, 8.0.0, 8.0.1, 8.0.10, 8.0.11, 8.0.12, 8.0.13, 8.0.14, 8.0.15-pre, 8.0.20-pre, 8.0.21-pre, 8.0.22, 8.0.23, 8.0.3, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.9

Original source record · Cite this exact observation · Complete original publisher JSON

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 12 Nov 02:22 UTC · 274 of 275 readable · 272 fully read · documentation 468/469 current