CVE-2026-57195High· 7.5▾ TwilightAsterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, a NULL pointer dereference in the `Asterisk Manager Interface (…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, a NULL pointer dereference in the Asterisk Manager Interface (AMI) may allow an unauthenticated attacker to crash Asterisk when Digest Authentication is used via HTTP. The Asterisk HTTP web server, AMI, and AMI access via HTTP must all be enabled; each is disabled by default. The attacker must be able to connect to the HTTP server, which binds only to 127.0.0.1 by default even when enabled. This issue is fixed in Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3.
asterisk < 20.20.1asterisk >= 21.0.0-pre1, < 21.12.3asterisk >= 22.0.0-pre1, < 22.10.1asterisk >= 23.0.0-pre1, < 23.4.1certified-asterisk < 20.7-cert11certified-asterisk >= 22.8-cert1-pre1, < 22.8-cert3Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-57199Low· 2.3Asterisk: Asterisk app_sms.c copies externally controlled SMS lengths into fixed in-struct buffers
CVE-2026-57200High· 7.5Asterisk: ARI REST-over-WebSocket read-only bypass allows arbitrary module path load and conditional RCE
CVE-2026-57186High· 7.5Asterisk: CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parser
CVE-2026-57192Medium· 6.0Asterisk: Out-of-Bounds Write in Codec2 Decoder Due to Floor/Ceil Sample Count Mismatch
CVE-2026-57191High· 8.2Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsing
CVE-2026-57190High· 7.0Asterisk: SQL Injection in cel_pgsql and cel_tds via CELGenUserEvent eventtype Field