CVE-2026-45809 | OpenSIPS prior 3.6.6/4.0.0-rc1 Watcherinfo Generation presence.winfo handle_subscribe stack-based overflow

A vulnerability categorized as critical has been discovered in OpenSIPS. Affected by this issue is the function handle_subscribe of the file presence.winfo of the component Watcherinfo Generation. Executing a manipulation can lead to stack-based buffer overflow.

This vulnerability is tracked as CVE-2026-45809. The attack can be launched remotely. No exploit exists.

It is advisable to upgrade the affected component.