{"vulnerability": "CVE-2026-90558", "sightings": [{"uuid": "94c28717-6a66-4896-93c2-ef926d3623d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90558", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvdplvyo2r2w", "content": "CVE-2026-90558 - sngrep\nVersions of sngrep up to 1.8.4 can mishandle SIP messages that contain very long header fields, causing memory corruption. This could make the program stop working or allow an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sngrep #irontec #CVE #infosec", "creation_timestamp": "2026-09-12T18:30:05.297045Z"}, {"uuid": "91c2eaf7-8637-4840-be54-36b1bc883164", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90558", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvdrczd6r322", "content": "\ud83d\udd34 CVE-2026-90558 - Critical (9.8)\n\nsngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting r...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-90558/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-12T19:00:55.365924Z"}, {"uuid": "79fb952f-14b8-4b11-a1bf-93c853a86a58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90558", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvduzfbw5z25", "content": "\ud83d\udea8 CVE-2026-90558 \u2014 CVSS 9.3 CRITICAL\n\nsngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines wh...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-90558\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-12T20:07:06.264960Z"}, {"uuid": "e4fef720-6c65-4c31-bbc0-98408ea11424", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90558", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mvdwdgyuem2b", "content": "sngrep 1.8.4\u4ee5\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306bSIP\u5c5e\u6027\u30d5\u30a9\u30fc\u30de\u30c3\u30c8\u51e6\u7406\u306b\u304a\u3051\u308b\u30b9\u30bf\u30c3\u30af\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u8106\u5f31\u6027\u3002\u653b\u6483\u8005\u306f\u4e0d\u6b63\u306aSIP\u30d1\u30b1\u30c3\u30c8\u3067\u30af\u30e9\u30c3\u30b7\u30e5\u3084\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-90558 CVSS 9.8 | CRITICAL", "creation_timestamp": "2026-09-12T20:30:37.290837Z"}, {"uuid": "399917ec-188f-44c2-a3e4-ccc2f6720ba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-90558", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117261141603138759", "content": "CVE-2026-90558: CRITICAL stack buffer overflow in irontec sngrep (<=1.8.4). Malicious SIP headers can crash or allow code execution. Patch status pending \u2014 filter untrusted SIP traffic. https://radar.offseq.com/threat/cve-2026-90558-stack-based-buffer-overflow-in-irontec-sngrep-f0d23a6d23082198 #OffSeq #CVE202690558 #vuln #SIPrisk", "creation_timestamp": "2026-09-13T01:30:25.721307Z"}, {"uuid": "8c574f54-2feb-4d3c-aa97-9feb2f3b4fc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-90558", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mveh3lmsfm2z", "content": "irontec sngrep <=1.8.4 hit by CRITICAL stack buffer overflow (CVE-2026-90558). Malicious SIP headers can crash or lead to RCE. Avoid untrusted SIP packets, check vendor for fixes. https://radar.offseq.com/threat/cve-2026-90558-stack-based-buffer-overflow-in-irontec-sngrep-f0d23a6d23082198 #OffSeq...", "creation_timestamp": "2026-09-13T01:30:27.841052Z"}, {"uuid": "de223d83-bae1-4d09-bb2b-37ae44caeae7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90558", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mvgisappuh2h", "content": "sngrep: fix CVE-2026-90558\n\nhttps://github.com/NixOS/nixpkgs/pull/562971\n\nhttps://tracker.security.nixos.org/issues/NIXPKGS-2026-2567\n\n#security", "creation_timestamp": "2026-09-13T21:06:21.114317Z"}, {"uuid": "05301ce6-37e5-49a6-a71a-1f562e3f093c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90558", "type": "seen", "source": "https://bsky.app/profile/nixpkgs-prs-bot.bsky.social/post/3mvgsrrqe4k2u", "content": "Merged PRs for 2026-09-13\n\nPackages\n#563033 wlr-utils: 1.7.0 -> 1.8.0\n#563024 linux_testing: 7.3-rc2 -> 7.3-rc3\n#563020 vaultwarden: 1.37.2 -> 1.37.3\n#562984 npb: add changelog\n#562972 workflows/periodic-merge: use correct permissions\n#562971 sngrep: fix CVE-2026-90558\n", "creation_timestamp": "2026-09-14T00:05:03.352567Z"}, {"uuid": "b54371d7-f391-470a-a2d0-aae7831a8721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90558", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mvifbq7zes2b", "content": "[Backport release-26.05] sngrep: 1.8.3 -> 1.8.4, fix CVE-2026-90558\n\nhttps://github.com/NixOS/nixpkgs/pull/563160\n\nhttps://tracker.security.nixos.org/issues/NIXPKGS-2026-2567\n\n#security", "creation_timestamp": "2026-09-14T15:08:45.139939Z"}]}