diff --git a/pkgs/by-name/si/sipp/package.nix b/pkgs/by-name/si/sipp/package.nix
index 74930f27f569..77883e9d3b87 100644
--- a/pkgs/by-name/si/sipp/package.nix
+++ b/pkgs/by-name/si/sipp/package.nix
@@ -7,6 +7,7 @@
   cmake,
   openssl,
   lksctp-tools,
+  fetchpatch,
 }:
 
 stdenv.mkDerivation (finalAttrs: {
@@ -20,6 +21,25 @@ stdenv.mkDerivation (finalAttrs: {
     hash = "sha256-1JKKD3rEddCzXrbNpbzvhFXlTlkTXlP7vmRXvlGzkgI=";
   };
 
+  # TODO: Remove this patches once SIPP releases a version newer than 3.7.7.
+  patches = [
+    (fetchpatch {
+      name = "CVE-2026-90780.patch";
+      url = "https://github.com/SIPp/sipp/commit/8ddfb43359703e665041a955543e07f504f80232.patch";
+      hash = "sha256-MYzy6C5yOwEJ7lo+GDdfTRlJ1t4ABtnm7ha+gAwoARo=";
+    })
+    (fetchpatch {
+      name = "CVE-2026-90779.patch";
+      url = "https://github.com/SIPp/sipp/commit/09916a92de768ab08056a78e4731f9edc3853e1c.patch";
+      hash = "sha256-MJe6SMT3yNzbep9/eC4ELCqxMKwe/v9ZkB4q/R0dpUg=";
+    })
+    (fetchpatch {
+      name = "CVE-2026-90778.patch";
+      url = "https://github.com/SIPp/sipp/commit/d913c75c4ac55fe6d2b79c6dc23d8aa36dbc5283.patch";
+      hash = "sha256-SEufhy4qB8PTWVwr5TE783P0yWjZk2/jcBGlqtJIbXc=";
+    })
+  ];
+
   postPatch = ''
     echo '#define SIPP_VERSION VERSION' > include/version.h
     echo '#define VERSION "v${finalAttrs.version}"' >> include/version.h