Asterisk

Products

Exploited and recent CVEs

• CVE-2026-57199 Low 2.3 Asterisk: Asterisk app_sms.c copies externally controlled SMS lengths into fixed in-struct buffers 0.5%
• CVE-2026-57199 Low 2.3 Asterisk: Asterisk app_sms.c copies externally controlled SMS lengths into fixed in-struct buffers 0.5%
• CVE-2026-57203 Medium 6.9 Asterisk: Local privilege escalation through ast_loggrabber's world-writable helper location 0.1%
• CVE-2026-57203 Medium 6.9 Asterisk: Local privilege escalation through ast_loggrabber's world-writable helper location 0.1%
• CVE-2026-57190 High 7.0 Asterisk: SQL Injection in cel_pgsql and cel_tds via CELGenUserEvent eventtype Field 0.7%
• CVE-2026-57190 High 7.0 Asterisk: SQL Injection in cel_pgsql and cel_tds via CELGenUserEvent eventtype Field 0.7%
• CVE-2026-57191 High 8.2 Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsing 0.6%
• CVE-2026-57191 High 8.2 Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsing 0.6%
• CVE-2026-57192 Medium 6.0 Asterisk: Out-of-Bounds Write in Codec2 Decoder Due to Floor/Ceil Sample Count Mismatch 0.7%
• CVE-2026-57192 Medium 6.0 Asterisk: Out-of-Bounds Write in Codec2 Decoder Due to Floor/Ceil Sample Count Mismatch 0.7%
• CVE-2026-57186 High 7.5 Asterisk: CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parser 0.6%
• CVE-2026-57186 High 7.5 Asterisk: CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parser 0.6%
• CVE-2026-57200 High 7.5 Asterisk: ARI REST-over-WebSocket read-only bypass allows arbitrary module path load and conditional RCE 0.9%
• CVE-2026-57195 High 7.5 Asterisk: NULL Pointer Dereference in HTTP AMI Digest Authentication 0.6%
• CVE-2026-57195 High 7.5 Asterisk: NULL Pointer Dereference in HTTP AMI Digest Authentication 0.6%
• CVE-2026-57202 High 8.1 Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writes 0.4%
• CVE-2026-57202 High 8.1 Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writes 0.4%
• CVE-2026-57188 High 7.1 Asterisk: Stack buffer overflow in res_xmpp XMPP namespace prefix handling 0.5%
• CVE-2026-57188 High 7.1 Asterisk: Stack buffer overflow in res_xmpp XMPP namespace prefix handling 0.5%
• CVE-2026-57189 Low 2.3 Asterisk: Possible RED T.140 Generation Accumulation OOB Write 0.7%
• CVE-2026-57189 Low 2.3 Asterisk: Possible RED T.140 Generation Accumulation OOB Write 0.7%
• CVE-2026-57201 High 7.5 Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Buffer 0.7%
• CVE-2026-57201 High 7.5 Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Buffer 0.7%
• CVE-2026-57194 Medium 5.9 Asterisk: chan_unistim DIALPAGE digit handling can overflow phone_number and crash Asterisk 0.4%
• CVE-2026-57194 Medium 5.9 Asterisk: chan_unistim DIALPAGE digit handling can overflow phone_number and crash Asterisk 0.4%
• CVE-2026-57198 Low 2.3 Asterisk: Possible RED T.140 Heap Buffer Overflow 0.8%
• CVE-2026-57198 Low 2.3 Asterisk: Possible RED T.140 Heap Buffer Overflow 0.8%
• CVE-2026-57185 Medium 6.5 Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser 0.5%
• CVE-2026-57185 Medium 6.5 Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser 0.5%
• CVE-2026-57197 High 7.7 Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex) 0.5%