asterisk vulnerabilities and fixes
Exploited and high-severity asterisk vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.
- 8.2CVE-2026-57191Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsingVerify fixasterisk asterisk
1 min read - 7.5CVE-2026-57200Asterisk: ARI REST-over-WebSocket read-only bypass allows arbitrary module path load and conditional RCERCEVerify fixasterisk asterisk
1 min read - 7.5CVE-2026-57195Asterisk: NULL Pointer Dereference in HTTP AMI Digest AuthenticationVerify fixasterisk asterisk
1 min read - 7.1CVE-2026-57188Asterisk: Stack buffer overflow in res_xmpp XMPP namespace prefix handlingVerify fixasterisk asterisk
1 min read - 7.7CVE-2026-57197Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex)Verify fixasterisk asterisk
1 min read - 7.5CVE-2026-57201Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte BufferVerify fixasterisk asterisk
1 min read - 7.1CVE-2026-57187Asterisk: Heap-use-after-free in Asterisk PJSIP TCP/SDP handling when TCP connection closes during SDP processingVerify fixasterisk asterisk
1 min read