CVE-2026-10629 Details

A vulnerability exists in the SIP signaling stack of Verizon's IMS network, affecting an unspecified version. The issue arises because SIP signaling is implemented without IPsec integrity protection, missing essential Security-Client/Security-Server headers and ESP traffic. This lack of protection allows an on-path attacker to compromise the confidentiality, integrity, and authenticity of VoLTE signaling. Unsecured SIP messages can be passively monitored and actively manipulated over the radio and core network.

Verizon has stated that IPsec integrity support is currently available upon request and will be extended to all user equipment later this year. However, until this network-level enforcement is observed and confirmed, users should assume that VoLTE signaling is untrusted for high-assurance operations.