---
id: "CVE-2026-35495"
kind: "vulnerability"
aliases: ["CVE-2026-35495"]
title: "IMS stack: improper SIP packet handling enables incorrect access control"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["ims", "infrastructure", "sip", "telecom"]
not_affected_if: []
published_at: "2026-11-05T03:17:27+00:00"
first_seen_at: "2026-11-05T03:31:43+00:00"
updated_at: "2026-11-05T03:33:49+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35495", "first_seen_at": "2026-11-05T03:31:43+00:00"}]
exploit_sources: []
---

# IMS stack: improper SIP packet handling enables incorrect access control

The IMS stack mishandles SIP packets, which leads to an incorrect access control weakness. The sources do not state what an attacker can reach or do beyond that.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-05T03:31:43+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-35495

## From the sources

In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerability

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_