SECURITYONLINE [.]info reports that FreeSWITCH api-chat has an in-the-wild remote code execution (RCE) vulnerability, with patching urged. The article’s lead and accompanying image describe an active exploitation scenario “via SIP MESSAGE on FusionPBX servers,” implying that deployed FreeSWITCH instances using api-chat may be targeted by remote attackers. The piece foregrounds urgency, calling it a “critical alert” and noting that exploit activity has been observed today.
Evidence cited in the report hinges on a linked CVE entry: CVE-2026-85046, described as a Google Chrome V8 type confusion vulnerability affecting Chrome prior to version 152.0.7977.82, which allegedly enables remote code execution. The article also situates the vulnerability within a broader ecosystem of software used for VoIP and communications, naming FusionPBX as a context for the attack surface.
The content visible on the page includes a CVE Watchtower section listing CVE-2026-85046 among “Active Exploits in the Wild” and indicates a CVSS score of 8.8 for this entry, with notes about its addition to KEV (KEV: Known Exploited Vulnerabilities).
Practical response guidance is limited in the visible material; readers are urged to patch, but the page requires login or support access to read the full vulnerability report. As with any unverified online post, claims should be treated cautiously until independent corroboration and vendor advisories are available.