Critical Stack Buffer Overflow Vulnerability in sngrep: CVE-2026-90558
A critical stack buffer overflow vulnerability (CVE-2026-90558) has been discovered in sngrep, a SIP network traffic grep tool, versions up to 1.8.4. The vulnerability has a CVSS score of 9.8 and allows attackers to execute arbitrary code or cause crashes by crafting malicious SIP packets with oversized header fields. The vulnerability is not actively exploited but poses a significant risk due to its high severity and potential for remote exploitation. Organizations are advised to upgrade to a patched version immediately.