Vulnerability in Verizon Volte

CVE-2026-10629

SIP signaling stack in Verizon IMS (unspecified version) implements SIP signaling without IPsec integrity protection (missing Security-Client/Security-Server headers and ESP traffic), which allows an on-path attacker to compromise confiden…

EPSS: 0.000 (3.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.4 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N.

Affected products

References

Frequently asked questions

What is CVE-2026-10629?
CVE-2026-10629 is a high-severity vulnerability in Verizon Volte, classified under CWE-346 ORIGIN VALIDATION ERROR. CVSS score: 7.4/10. Published 2026-06-02.
How severe is CVE-2026-10629?
High severity. CVSS v3 base score is 7.4 out of 10.