asterisk vulnerabilities

CVEs per yearBy the year they were published

1. 20191
2. 20233
3. 20243
4. 20256
5. 202624

Newest CVEs

• CVE-2026-57199

  Asterisk: Asterisk app_sms.c copies externally controlled SMS lengths into fixed in-struct buffers

  asterisk · asterisk

  Low2.3
• CVE-2026-57203

  Asterisk: Local privilege escalation through ast_loggrabber's world-writable helper location

  asterisk · asterisk

  Medium6.9
• CVE-2026-57190

  Asterisk: SQL Injection in cel_pgsql and cel_tds via CELGenUserEvent eventtype Field

  asterisk · asterisk

  High7.0
• CVE-2026-57191

  Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsing

  asterisk · asterisk

  High8.2
• CVE-2026-57192

  Asterisk: Out-of-Bounds Write in Codec2 Decoder Due to Floor/Ceil Sample Count Mismatch

  asterisk · asterisk

  Medium6.0
• CVE-2026-57186

  Asterisk: CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parser

  asterisk · asterisk

  High7.5
• CVE-2026-57200

  Asterisk: ARI REST-over-WebSocket read-only bypass allows arbitrary module path load and conditional RCE

  asterisk · asterisk

  High7.5
• CVE-2026-57195

  Asterisk: NULL Pointer Dereference in HTTP AMI Digest Authentication

  asterisk · asterisk

  High7.5
• CVE-2026-57202

  Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writes

  asterisk · asterisk

  High8.1
• CVE-2026-57188

  Asterisk: Stack buffer overflow in res_xmpp XMPP namespace prefix handling

  asterisk · asterisk

  High7.1