PT-2026-45769 · Verizon · Verizon Ims

Cheoljun Park + 3 · CVE-2026-10629 · Published 2026-06-02 · Updated 2026-06-08

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Verizon IMS (affected versions not specified)

Description The SIP signaling stack implements SIP signaling without IPsec integrity protection, specifically lacking Security-Client/Security-Server headers and ESP traffic. This allows an on-path attacker to compromise the confidentiality, integrity, and authenticity of VoLTE signaling through passive monitoring and active manipulation of unsecured SIP messages over the radio and core network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-10629

Affected Products

Verizon Ims

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-10629 · Security Note
• https://twitter.com/UndercodeNews/status/2063964309034561641 · Twitter Post
• https://kb.cert.org/vuls/id/615987 · Note
• https://3gpp.org/DynReport/33203.htm · Note