CVE-2025-53399
In Sipwise rtpengine before 13.4.1.1, an origin-validation error in the endpoint-learning logic of the media-relay core allows remote attackers to inject or intercept RTP/SRTP media streams via RTP p…
All CVEs associated with "rtpengine". Page 1/1 • 1 CVEs.
A curated feed of “rtpengine”-related CVEs appears below. We currently track 1 CVEs for this tag (all time). In the last 365 days, 1 were published. Average CVSS is 6.9 (all time; 6.9 over 365d), and 0% are rated High/Critical (all time). Top CWEs (last 365 days): CWE-346 - Origin Validation Error.
In our taxonomy this topic maps to a LOW impact class. Network services expose protocol parsers and daemons. Patch, restrict to trusted segments, validate inputs, and apply rate limiting. Use the filters below to sort by CVSS, risk and CWE. Each detail page highlights vendor advisories and mitigation tips.
This table shows recent release cycles and their projected end-of-life. Data source: endoflife.date.
| Cycle | Release | Latest | EOL | LTS |
|---|---|---|---|---|
| 26.0 | 26.0.1.13 | LTS | ||
| 14.1 | 14.1.1.13 | Expired | ||
| 14.0 | 14.0.1.11 | Expired | ||
| 13.5 | 13.5.1.16 | LTS | ||
| 13.4 | 13.4.1.10 | Expired | ||
| 13.3 | 13.3.1.16 | Expired | ||
| 13.2 | 13.2.1.16 | Expired | ||
| 13.1 | 13.1.1.16 | Expired | ||
| 13.0 | 13.0.1.10 | Expired | ||
| 12.5 | 12.5.1.54 | LTS | ||
| 12.4 | 12.4.1.11 | Expired | ||
| 12.3 | 12.3.1.6 | Expired | ||
| 12.2 | 12.2.1.5 | Expired | ||
| 12.1 | 12.1.1.7 | Expired | ||
| 12.0 | 12.0.1.5 | Expired | ||
| 11.5 | 11.5.1.52 | Soon | LTS | |
| 11.4 | 11.4.1.8 | Expired | ||
| 11.3 | 11.3.1.15 | Expired | ||
| 11.2 | 11.2.1.12 | Expired | ||
| 11.1 | 11.1.1.12 | Expired | ||
| 11.0 | 11.0.1.7 | Expired | ||
| 10.5 | 10.5.9.1 | Expired | LTS | |
| 9.5 | 9.5.9.1 | Expired | ||
| 8.5 | 8.5.12.2 | Expired |
Maintained Soon (≤ 180 days) Expired
Subscribe lifecycle: RSS · RSS (expired) · ICS
Subscribe CVEs: RSS for “rtpengine”
CVEs tagged with this topic. Filters apply to the whole list (loaded from JSON).
In Sipwise rtpengine before 13.4.1.1, an origin-validation error in the endpoint-learning logic of the media-relay core allows remote attackers to inject or intercept RTP/SRTP media streams via RTP p…