# CVE-2026-57195: Asterisk NULL pointer dereference in Manager Interface HTTP digest authentication

Source: https://junglewise.ai/threats/cve-2026-57195-asterisk-is-an-open-source-private-branch-exchange-and-telephony  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-27. Updated: 2026-10-27  
License: CC BY 4.0 with a link back

CVE-2026-57195 · Severity: high · CVSS 7.5 · Published 2026-10-27

Asterisk is an open source phone switch and communications toolkit. When the HTTP web server and Manager Interface (AMI) are enabled with digest authentication, an unauthenticated attacker who can connect to the HTTP port can crash Asterisk. The HTTP port binds only to localhost by default, limiting exposure, but the crash causes service outage.

Technologies: [Asterisk](https://junglewise.ai/threats/technologies/asterisk), [Asterisk Certified Asterisk](https://junglewise.ai/threats/technologies/certified-asterisk). Vendors: [Asterisk](https://junglewise.ai/threats/vendors/asterisk).

## Quick answers

**Is CVE-2026-57195 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-57195 being exploited in the wild.

**How severe is CVE-2026-57195?** High severity, with a CVSS score of 7.5, published 27 October 2026.

**Which products and versions are affected?** Asterisk before 20.20.1, 21.12.3, 22.10.1, 23.4.1; Asterisk Certified Asterisk before 20.7-cert11, 22.8-cert3.

**Is there a fix for CVE-2026-57195?** Yes: fixed in Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1; Certified Asterisk 20.7-cert11, 22.8-cert3. Until then: Disable the HTTP web server, AMI, or HTTP access to AMI (all disabled by default). If these services must be enabled, restrict network access to the HTTP port to trusted networks only. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-57195 attacked?** It is attacked over the network, in a hosted service.

**Am I affected by CVE-2026-57195?** Check whether you run Asterisk or Asterisk Certified Asterisk at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1; Certified Asterisk 20.7-cert11, 22.8-cert3

Disable the HTTP web server, AMI, or HTTP access to AMI (all disabled by default). If these services must be enabled, restrict network access to the HTTP port to trusted networks only.

## Technical details

A NULL pointer dereference exists in the AMI HTTP authentication callback when digest authentication is enabled. The vulnerability occurs when logging errors for failed authentication attempts, where a null session address pointer is dereferenced instead of the remote address. An unauthenticated attacker can trigger the crash by sending a malformed HTTP authentication request to the manager HTTP interface.

## Affected products

- Asterisk Asterisk before 20.20.1, 21.12.3, 22.10.1, 23.4.1
- Asterisk Certified Asterisk before 20.7-cert11, 22.8-cert3

## Timeline

- 2026-10-27: disclosed

## References

- [https://github.com/asterisk/asterisk/commit/10c5b2efcacab03bf04a229f81cc24e76fe42c41](https://github.com/asterisk/asterisk/commit/10c5b2efcacab03bf04a229f81cc24e76fe42c41)
- [https://github.com/asterisk/asterisk/commit/362ef847e7e057b7626e476ddcfe7328ea314db4](https://github.com/asterisk/asterisk/commit/362ef847e7e057b7626e476ddcfe7328ea314db4)

## Related threats

- [Asterisk privilege escalation in ast_loggrabber via /tmp](https://junglewise.ai/threats/cve-2026-57203-asterisk-is-an-open-source-private-branch-exchange-and-telephony)
- [Asterisk OOH323 Q.931 parser denial of service](https://junglewise.ai/threats/cve-2026-57186-asterisk-is-an-open-source-private-branch-exchange-and-telephony)
- [Asterisk authorization bypass in ARI REST-over-WebSocket](https://junglewise.ai/threats/cve-2026-57200-asterisk-is-an-open-source-private-branch-exchange-and-telephony)
- [Asterisk privilege escalation in REST Interface](https://junglewise.ai/threats/cve-2026-57202-asterisk-is-an-open-source-private-branch-exchange-and-telephony)
- [Asterisk stack buffer overflow in XMPP namespace prefix handling](https://junglewise.ai/threats/cve-2026-57188-asterisk-is-an-open-source-private-branch-exchange-and-telephony)