PULSE
ENPT
FEED
ransomplay reclama a NY Snacks · US · Retail & E-Commerceransomplay reclama a BROTHERS EXPRESS LLC · US · Transportationransomplay reclama a Signworx · GB · Otherransomsilentransomgroup reclama a A&O Shearman · GB · Professional Servicesransomsilentransomgroup reclama a J...ransomhyflock reclama a tcadarwin · AU · Otherransombyod reclama a Providence · Healthcareransombyod reclama a Toyota · JP · Manufacturingransomorova reclama a Herminio India Precision Technology · IN · Manufacturingransomkrybit reclama a Actualize Consulting · US · Professional Servicesransomclimax inc reclama a Redacted Redactedransomclimax inc reclama a Nepal Electricity Authority · NP · Energy & Utilitiesransomclimax inc reclama a Frolina Home · BR · Retail & E-Commerceransombooba project reclama a COMPUTER TASK GROUP, Inc. · US · Technologyransomplay reclama a NY Snacks · US · Retail & E-Commerceransomplay reclama a BROTHERS EXPRESS LLC · US · Transportationransomplay reclama a Signworx · GB · Otherransomsilentransomgroup reclama a A&O Shearman · GB · Professional Servicesransomsilentransomgroup reclama a J...ransomhyflock reclama a tcadarwin · AU · Otherransombyod reclama a Providence · Healthcareransombyod reclama a Toyota · JP · Manufacturingransomorova reclama a Herminio India Precision Technology · IN · Manufacturingransomkrybit reclama a Actualize Consulting · US · Professional Servicesransomclimax inc reclama a Redacted Redactedransomclimax inc reclama a Nepal Electricity Authority · NP · Energy & Utilitiesransomclimax inc reclama a Frolina Home · BR · Retail & E-Commerceransombooba project reclama a COMPUTER TASK GROUP, Inc. · US · Technology
← Todos los CVEs
CVE Watch10 nov 2026

CVE-2026-58736

In NotifySipResponse of SessionEx.cpp, there is a possible way to corrupt memory via a dangling connection pointer in the pending response q

CVSS

—

Sin CVSS

EPSS

—

KEV

—

Exploit Today

0

0-100

Publicado: 10 nov 2026 · Última mod.: 10 nov 2026

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

In NotifySipResponse of SessionEx.cpp, there is a possible way to corrupt memory via a dangling connection pointer in the pending response queue due to a use after free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Referencias oficiales
CVEs relacionados

Sin CVEs relacionados por CWE o producto.