Login Request a demo
AS
Product
asterisk
by asterisk · last CVE Oct 27, 2026
52
CVEs
0
On KEV
8.8
Max CVSS
20
New 30D
Vulnerabilities52In the news0Timeline
Severity mix
Critical 0High 16Medium 13Low 4
Severity
All severities52Critical0High16Medium13Low4
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add asterisk to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-23741
8.8
0%
Feb 6
ast_coredumper running as root sources ast_debug_tools.conf from /etc/asterisk; potentially leading to privilege escalation
Affected: < 23.2.2; < 22.8.2; < 21.12.1; < 20.18.2; < 20.7-cert9
CVE-2024-42365
8.8
5%
Aug 8
Asterisk allows `Write=originate` as sufficient permissions for code execution / `System()` dialplan
Affected: < 18.24.2; >= 19.0.0, < 20.9.2; >= 21.0.0, < 21.4.2; < 18.9-cert11; >= 19.0, < 20.7-cert2
CVE-2026-57191
New
8.2
1%
Oct 27
Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsing
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-57202
New
8.1
0%
Oct 27
Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writes
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-23740
7.8
0%
Feb 6
Asterisk vulnerable to potential privilege escalation
Affected: < 23.2.2; < 22.8.2; < 21.12.1; < 20.18.2; < 20.7-cert9
CVE-2025-1131
7.8
0%
Sep 23
Asterisk Unsafe Shell Sourcing in safe_asterisk Leads to Local Privilege Escalation
Affected: Asterisk <=18.26.2; Asterisk <= 20.15.0; Asterisk <= 21.10.0; Asterisk <= 22.5.0
CVE-2025-47780
7.8
0%
May 22
cli_permissions.conf: deny option does not work for disallowing shell commands
Affected: < 18.9-cert14; >= 18.10, < 18.26.2; >= 20.0, < 20.7-cert5; >= 20.8, < 20.14.1; >= 21.0, < 21.9.1; >= 22.0, < 22.4.1
CVE-2026-57197
New
7.7
1%
Oct 27
Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex)
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-57186
New
7.5
1%
Oct 27
Asterisk: CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parser
Affected: >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-57200
New
7.5
1%
Oct 27
Asterisk: ARI REST-over-WebSocket read-only bypass allows arbitrary module path load and conditional RCE
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-57195
New
7.5
1%
Oct 27
Asterisk: NULL Pointer Dereference in HTTP AMI Digest Authentication
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-57201
New
7.5
1%
Oct 27
Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Buffer
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2025-57767
7.5
0%
Aug 28
Asterisk can crash from a specifically malformed Authorization header in an incoming SIP request
Affected: < 22.5.2; < 21.10.2; < 20.15.2
CVE-2026-57188
New
7.1
1%
Oct 27
Asterisk: Stack buffer overflow in res_xmpp XMPP namespace prefix handling
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-57187
New
7.1
0%
Oct 26
Asterisk: Heap-use-after-free in Asterisk PJSIP TCP/SDP handling when TCP connection closes during SDP processing
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-57190
New
7.0
1%
Oct 27
Asterisk: SQL Injection in cel_pgsql and cel_tds via CELGenUserEvent eventtype Field
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-57203
New
6.9
0%
Oct 27
Asterisk: Local privilege escalation through ast_loggrabber's world-writable helper location
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-57193
New
6.9
2%
Oct 26
Asterisk: LDAP Filter Injection in res_config_ldap via SIP Username (Unauthenticated Information Disclosure)
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-57185
New
6.5
0%
Oct 27
Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-23739
6.5
0%
Feb 6
Asterisk xml.c uses unsafe XML_PARSE_NOENT leading to potential XXE Injection
Affected: < 23.2.2; < 22.8.2; < 21.12.1; < 20.18.2; < 20.7-cert9
CVE-2025-54995
6.5
1%
Aug 28
Asterisk remotely exploitable leak of RTP UDP ports and internal resources
Affected: < 18.26.4; < 18.9-cert17
CVE-2025-49832
6.5
0%
Aug 1
Asterisk is Vulnerable to Remote DoS and possible RCE Attacks During Memory Allocation
Affected: < 18.26.3; >= 20.00.0, < 20.15.1; >= 21.00.0, < 21.10.1; >= 22.00.0, < 22.5.1; >= 20.7-cert6, < 20.7-cert7
CVE-2025-47779
6.5
1%
May 22
Using malformed From header can forge identity with ";" or NULL in name portion
Affected: < 18.9-cert14; >= 18.10, < 18.26.2; >= 20.0, < 20.7-cert5; >= 20.8, < 20.14.1; >= 21.0, < 21.9.1; >= 22.0, < 22.4.1
CVE-2026-57184
New
6.3
1%
Oct 26
Asterisk: Out-of-Bounds Read in Q.931 Information Element Parser (H.323 Addon)
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-23738
6.1
0%
Feb 6
The Asterisk embedded web server 's /httpstatus page echos user supplied values(cookie and query string) without sanitization
Affected: < 23.2.2; < 22.8.2; < 21.12.1; < 20.18.2; < 20.7-cert9
CVE-2026-57192
New
6.0
1%
Oct 27
Asterisk: Out-of-Bounds Write in Codec2 Decoder Due to Floor/Ceil Sample Count Mismatch
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-57194
New
5.9
0%
Oct 27
Asterisk: chan_unistim DIALPAGE digit handling can overflow phone_number and crash Asterisk
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2024-42491
5.7
1%
Sep 5
A malformed Contact or Record-Route URI in an incoming SIP request can cause Asterisk to crash when res_resolver_unbound is used
Affected: < 18.24.3; >= 19.0.0, < 20.9.3; >= 21.0.0, < 21.4.3; < 18.9-cert12; >= 19.0, < 20.7-cert2
CVE-2024-35190
5.3
1%
May 17
Asterisk' res_pjsip_endpoint_identifier_ip: wrongly matches ALL unauthorized SIP requests
Affected: = 21.3.0; = 20.8.0; = 18.23.0
CVE-2026-57199
New
2.3
0%
Oct 27
Asterisk: Asterisk app_sms.c copies externally controlled SMS lengths into fixed in-struct buffers
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-57189
New
2.3
1%
Oct 27
Asterisk: Possible RED T.140 Generation Accumulation OOB Write
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-57198
New
2.3
1%
Oct 27
Asterisk: Possible RED T.140 Heap Buffer Overflow
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-57196
New
2.3
1%
Oct 26
Asterisk: Reflected XSS in Phone Provisioning HTTP Error Pages
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2010-0441
–
3%
Feb 4
Asterisk Open Source 1.6.0.x before 1.6.0.22, 1.6.1.x before 1.6.1.14, and 1.6.2.x before 1.6.2.2, and Business Edition C.3 before C.3.3.2, allows remote attackers to cause a…
Affected: 1.6.0; 1.6.0.1; 1.6.0.2; 1.6.0.3; 1.6.0.5; 1.6.0.6; +34 more
CVE-2009-2346
–
3%
Sep 8
The IAX2 protocol implementation in Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.2, 1.6.0.x before 1.6.0.15, and 1.6.1.x before 1.6.1.6; Business Edition B.x.x…
Affected: b.1.3.2; b.1.3.3; b.2.2.0; b.2.2.1; b.2.3.1; b.2.3.2; +25 more
CVE-2008-3263
–
28%
Jul 22
The IAX2 protocol implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B.2.5.4, and C.x.x before…
Affected: 0.1.0; 0.1.1; 0.1.2; 0.1.3; 0.1.4; 0.1.5; +34 more
CVE-2008-1390
–
4%
Mar 24
The AsteriskGUI HTTP server in Asterisk Open Source 1.4.x before 1.4.19-rc3 and 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6, AsteriskNOW before 1.0.2, Appliance…
Affected: 1.4.1; 1.4.2; 1.4.3; 1.4.4; 1.4.5; 1.4.6; +15 more
CVE-2008-1332
–
2%
Mar 20
Unspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before 1.4.18.1 and 1.4.19-rc3; Business Edition A.x.x, B.x.x before B.2.5.1, and C.x.x before…
Affected: a; b.1.3.2; b.1.3.3; b.2.2.0; b.2.2.1; b.2.3.1; +9 more
CVE-2007-4521
–
3%
Aug 28
Asterisk Open Source 1.4.5 through 1.4.11, when configured to use an IMAP voicemail storage backend, allows remote attackers to cause a denial of service via an e-mail with an…
Affected: 1.4.5; 1.4.6; 1.4.7; 1.4.8; 1.4.9; 1.4.10; +1 more
CVE-2007-4455
–
2%
Aug 22
The SIP channel driver (chan_sip) in Asterisk Open Source 1.4.x before 1.4.11, AsteriskNOW before beta7, Asterisk Appliance Developer Kit 0.x before 0.8.0, and s800i (Asterisk…
Affected: through 1.4.9
CVE-2007-4280
–
1%
Aug 9
The Skinny channel driver (chan_skinny) in Asterisk Open Source before 1.4.10, AsteriskNOW before beta7, Appliance Developer Kit before 0.7.0, and Appliance s800i before 1.0.3…
Affected: through 1.4.9
CVE-2007-3763
–
27%
Jul 18
The IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before…
Affected: 1.0; 1.0.6; 1.0.7; 1.0.8; 1.0.9; 1.0.10; +25 more
CVE-2007-3764
–
32%
Jul 18
The Skinny channel driver (chan_skinny) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before…
Affected: 1.0; 1.0.6; 1.0.7; 1.0.8; 1.0.9; 1.0.10; +25 more
CVE-2007-3762
–
6%
Jul 18
Stack-based buffer overflow in the IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7,…
Affected: 1.0; 1.0.6; 1.0.7; 1.0.8; 1.0.9; 1.0.10; +25 more
CVE-2007-3765
–
2%
Jul 18
The STUN implementation in Asterisk 1.4.x before 1.4.8, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a…
Affected: 1.0; 1.0.6; 1.0.7; 1.0.8; 1.0.9; 1.0.10; +25 more
CVE-2007-2488
–
4%
May 7
The IAX2 channel driver (chan_iax2) in Asterisk before 20070504 does not properly null terminate data, which allows remote attackers to trigger loss of transmitted data, and…
Affected: through 1.4.4_2007-04-27
CVE-2007-2293
–
24%
Apr 26
Multiple stack-based buffer overflows in the process_sdp function in chan_sip.c of the SIP channel T.38 SDP parser in Asterisk before 1.4.3 allow remote attackers to execute…
Affected: 1.4.1; 1.4.2; 1.4_beta
CVE-2007-2294
–
4%
Apr 26
The Manager Interface in Asterisk before 1.2.18 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (crash) by using MD5 authentication to authenticate a…
Affected: 1.2.0_beta1; 1.2.0_beta2; 1.2.5; 1.2.6; 1.2.7; 1.2.8; +12 more
CVE-2007-2297
–
2%
Apr 26
The SIP channel driver (chan_sip) in Asterisk before 1.2.18 and 1.4.x before 1.4.3 does not properly parse SIP UDP packets that do not contain a valid response code, which allows…
Affected: 1.2.0_beta1; 1.2.0_beta2; 1.2.10; 1.2.11; 1.2.12; 1.2.13; +7 more
CVE-2007-1595
–
3%
Mar 22
The Asterisk Extension Language (AEL) in pbx/pbx_ael.c in Asterisk does not properly generate extensions, which allows remote attackers to execute arbitrary extensions and have an…
Affected: 1.2.13
Page 1 of 2 · 52 total
12