AS
Product
Asterisk
28
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 8Medium 13Low 0
Watch
Add Asterisk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-23741 | 8.8 | Feb 6 | ast_coredumper running as root sources ast_debug_tools.conf from /etc/asterisk; potentially leading to privilege escalation Affected: before 20.18.2; 21.0.0 before 21.12.1; 22.0.0 before 22.8.2; 23.0.0 before 23.2.2 |
| CVE-2026-23740 | 7.8 | Feb 6 | Asterisk vulnerable to potential privilege escalation Affected: before 20.18.2; 21.0.0 before 21.12.1; 22.0.0 before 22.8.2; 23.0.0 before 23.2.2 |
| CVE-2025-1131 | 7.8 | Sep 23 | Asterisk Unsafe Shell Sourcing in safe_asterisk Leads to Local Privilege Escalation Affected: before 18.26.3; 20.0.0 before 20.15.1; 21.0.0 before 21.10.1; 22.0.0 before 22.5.1 |
| CVE-2025-47780 | 7.8 | May 22 | cli_permissions.conf: deny option does not work for disallowing shell commands Affected: before 18.26.2; 20.0.0 before 20.14.1; 21.0.0 before 21.9.1; 22.0.0 before 22.4.1 |
| CVE-2025-57767 | 7.5 | Aug 28 | Asterisk can crash from a specifically malformed Authorization header in an incoming SIP request Affected: before 20.15.2; 21.0.0 before 21.10.2; 22.0.0 before 22.5.2 |
| CVE-2022-37325 | 7.5 | Dec 5 | In Sangoma Asterisk through 16.28.0, 17.x and 18.x through 18.14.0, and 19.x through 19.6.0, an incoming Setup message to addons/ooh323c/src/ooq931.c with a malformed Calling or… Affected: 16.0.0 before 16.29.1; 18.0.0 before 18.15.1; 19.0.0 before 19.7.1; 20.0.0 |
| CVE-2009-3723 | 7.5 | Oct 29 | asterisk allows calls on prohibited networks Affected: 1.6.1 before 1.6.1.8 |
| CVE-2017-9358 | 7.5 | Jun 2 | A memory exhaustion vulnerability exists in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1 and Certified Asterisk 13.13 before 13.13-cert4, which can be triggered… Affected: 13.0.0; 13.1.0; 13.1.0; 13.1.0; 13.2.0; 13.2.0; +34 more |
Showing 8