ctrlINT What the industry said about every indicator, with the quote

CVE-2026-113380Vulnerability

Reported by 6 independent sources · first reported by Malwarebytes Labs · last reported

Last reported 2 days ago

EPSS0.3%
higher than 23% of CVEsFIRST EPSS, as of 23 Oct 2026

What the reports say

6 reports, newest first · the exact sentence from each

  1. “A critical vulnerability, tracked as CVE-2026-113380 (CVSS score 9.3 of 10), in Signal ’s calling library could allow a malicious caller to interfere with call termination, potentially leaving the victim’s microphone and camera active after they believe the conversation has ended…”

    Security AffairsNews
    Signal Vulnerability Could Keep Calls Alive After Users Hang Up

  2. “A critical security flaw in the Signal messaging app (CVE-2026-113380, CVSS score: 9.3) can allow a malicious caller to keep audio and video tracks enabled even after the victim has hung up.”

    The Hacker NewsNews
    ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More

  3. “The security defect is tracked as CVE-2026-113380 (CVSS score of 9.3) and impacts RingRTC, the open source library Signal uses for voice and video calls, which is based on WebRTC.”

    SecurityWeekNews
    Signal Vulnerability Lets Malicious Callers Block Hang-Ups

  4. “Tracked as CVE-2026-113380, the vulnerability affects RingRTC versions before 2.72.0.”

    Help Net SecurityNews
    Signal flaw could expose audio and video even after users hang up

  5. “The vulnerability, CVE-2026-113380, was published by MITRE on Tuesday and given a CVSS score of 9.3, marking it as a critical issue in Signal’s open-source RingRTC library in every single version before 2.72.0.”

    The Register (security)News
    Signal bug could keep your mic - and camera - on after hangup

  6. “The vulnerability, tracked as CVE-2026-113380 (CVSS score 9.3 out of 10), affects RingRTC versions earlier than 2.72.0.”

    Malwarebytes LabsVendor
    Signal bug could let someone keep listening after you hang up

Indicators reported together

named in the same reports
Copy these 7 indicators · defanged

Also named with it: CVE-2024-4577, CVE-2024-40766, CVE-2023-27532, CVE-2022-47945, CVE-2020-3259, CVE-2021-41773, CVE-2026-107186, CVE-2026-107187, CVE-2026-107188, CVE-2023-20269, CVE-2024-40711, CVE-2026-65162, CVE-2026-114509

Thanks — we review every report.

Report a wrong value
What is wrong with CVE-2026-113380 here?
No account needed. We do not store your IP address.