VDB

CVE-2026-10629

CVE-2026-10629 PUBLISHED CVSS 7.4 HIGH

Reported by certcc · Published June 2, 2026

SIP signaling stack in Verizon IMS (unspecified version) implements SIP signaling without IPsec integrity protection (missing Security-Client/Security-Server headers and ESP traffic), which allows an on-path attacker to compromise confidentiality, integrity, and authenticity of VoLTE signaling via passive monitoring and active manipulation of unsecured SIP messages over the radio and core network.

Risk Scores

CVSS 3.1
7.4
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected Products

VendorProductVersions
VerizonVoLTEUNKNOWN
VerizonVoLTEUNKNOWN, UNKNOWN

Timeline

  • Jun 2, 2026 CVE Published
  • Jun 3, 2026 CVE Updated
  • Jun 5, 2026 EPSS Score
  • Jun 11, 2026 Coalition ESS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›