Do Son Details and PoC are public for two unpatched free5GC vulnerabilities in the 5G core: BSF auth bypass CVE-2026-115926 and an exposed root CA key.
Telecom Security
A major VoLTE security flaw leaves millions at risk. Learn how this Verizon IMS vulnerability allows undetected call hijacking and message spoofing.
FreePBX fixes critical 9.1 CVSS flaw (CVE-2026-46376) where hardcoded credentials grant unauthenticated portal access. Update your modules now!
Rapid7 uncovers Red Menshen’s BPFdoor backdoor in global telecom cores. Learn how this China-nexus actor uses kernel-level stealth for mass surveillance.
India's DoT mandated SIM-binding for all messaging apps (WhatsApp, Telegram, Signal). Users must re-verify every six hours to combat cybercrime and cross-border fraud.
Avaya CMS hit by CVSS 9.9 flaw allowing remote command execution via web request. Affected versions must upgrade to avoid system compromise.