{"schema_version":1,"title":"Asterisk vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 14 vulnerabilities in Asterisk: 0 in the last 7 days and 14 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-57203, was published on 27 October 2026. 14 vulnerabilities in the last four weeks, up from none in the four before. 2 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/asterisk","json_url":"https://junglewise.ai/threats/vendors/asterisk.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/asterisk","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":false,"counts":{"high":5,"all_time":14,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":14,"last_90_days":14,"last_365_days":14},"latest":[{"cve":"CVE-2026-57203","slug":"cve-2026-57203-asterisk-is-an-open-source-private-branch-exchange-and-telephony","title":"Asterisk privilege escalation in ast_loggrabber via /tmp","severity":"info","exploited":false,"published_at":"2026-10-27T22:17:27.89+00:00","url":"https://junglewise.ai/threats/cve-2026-57203-asterisk-is-an-open-source-private-branch-exchange-and-telephony"},{"cve":"CVE-2026-57186","cvss":7.5,"slug":"cve-2026-57186-asterisk-is-an-open-source-private-branch-exchange-and-telephony","title":"Asterisk OOH323 Q.931 parser denial of service","severity":"high","exploited":false,"published_at":"2026-10-27T22:17:26.99+00:00","url":"https://junglewise.ai/threats/cve-2026-57186-asterisk-is-an-open-source-private-branch-exchange-and-telephony"},{"cve":"CVE-2026-57200","cvss":7.5,"slug":"cve-2026-57200-asterisk-is-an-open-source-private-branch-exchange-and-telephony","title":"Asterisk authorization bypass in ARI REST-over-WebSocket","severity":"high","exploited":false,"published_at":"2026-10-27T21:18:06.843+00:00","url":"https://junglewise.ai/threats/cve-2026-57200-asterisk-is-an-open-source-private-branch-exchange-and-telephony"},{"cve":"CVE-2026-57195","cvss":7.5,"slug":"cve-2026-57195-asterisk-is-an-open-source-private-branch-exchange-and-telephony","title":"Asterisk NULL pointer dereference in Manager Interface HTTP digest authentication","severity":"high","exploited":false,"published_at":"2026-10-27T21:18:06.633+00:00","url":"https://junglewise.ai/threats/cve-2026-57195-asterisk-is-an-open-source-private-branch-exchange-and-telephony"},{"cve":"CVE-2026-57202","cvss":8.1,"slug":"cve-2026-57202-asterisk-is-an-open-source-private-branch-exchange-and-telephony","title":"Asterisk privilege escalation in REST Interface","severity":"high","exploited":false,"published_at":"2026-10-27T18:17:37.55+00:00","url":"https://junglewise.ai/threats/cve-2026-57202-asterisk-is-an-open-source-private-branch-exchange-and-telephony"},{"cve":"CVE-2026-57188","slug":"cve-2026-57188-asterisk-is-an-open-source-private-branch-exchange-and-telephony","title":"Asterisk stack buffer overflow in XMPP namespace prefix handling","severity":"info","exploited":false,"published_at":"2026-10-27T18:17:37.367+00:00","url":"https://junglewise.ai/threats/cve-2026-57188-asterisk-is-an-open-source-private-branch-exchange-and-telephony"},{"cve":"CVE-2026-57201","cvss":7.5,"slug":"cve-2026-57201-asterisk-is-an-open-source-private-branch-exchange-and-telephony","title":"Asterisk H.323 stack buffer overflow in trace logging","severity":"high","exploited":false,"published_at":"2026-10-27T17:17:02.117+00:00","url":"https://junglewise.ai/threats/cve-2026-57201-asterisk-is-an-open-source-private-branch-exchange-and-telephony"},{"cve":"CVE-2026-57198","slug":"cve-2026-57198-asterisk-is-an-open-source-private-branch-exchange-and-telephony","title":"Asterisk T.140 RED heap buffer overflow","severity":"info","exploited":false,"published_at":"2026-10-27T17:17:01.963+00:00","url":"https://junglewise.ai/threats/cve-2026-57198-asterisk-is-an-open-source-private-branch-exchange-and-telephony"},{"cve":"CVE-2026-57197","slug":"cve-2026-57197-asterisk-is-an-open-source-private-branch-exchange-and-telephony","title":"Asterisk heap buffer overflow in OGG Speex format handler","severity":"info","exploited":false,"published_at":"2026-10-27T17:17:01.793+00:00","url":"https://junglewise.ai/threats/cve-2026-57197-asterisk-is-an-open-source-private-branch-exchange-and-telephony"},{"cve":"CVE-2026-57194","cvss":5.9,"slug":"cve-2026-57194-asterisk-is-an-open-source-private-branch-exchange-and-telephony","title":"Asterisk out-of-bounds write in chan_unistim DIALPAGE handling","severity":"medium","exploited":false,"published_at":"2026-10-27T17:17:01.62+00:00","url":"https://junglewise.ai/threats/cve-2026-57194-asterisk-is-an-open-source-private-branch-exchange-and-telephony"},{"cve":"CVE-2026-57189","slug":"cve-2026-57189-asterisk-is-an-open-source-private-branch-exchange-and-telephony","title":"Asterisk T.140 RED buffer overrun in RTP","severity":"info","exploited":false,"published_at":"2026-10-27T17:17:01.45+00:00","url":"https://junglewise.ai/threats/cve-2026-57189-asterisk-is-an-open-source-private-branch-exchange-and-telephony"},{"cve":"CVE-2026-57196","slug":"cve-2026-57196-asterisk-is-an-open-source-private-branch-exchange-and-telephony","title":"Asterisk reflected cross-site scripting in phone provisioning","severity":"info","exploited":false,"published_at":"2026-10-26T20:17:57.047+00:00","url":"https://junglewise.ai/threats/cve-2026-57196-asterisk-is-an-open-source-private-branch-exchange-and-telephony"},{"cve":"CVE-2026-57193","slug":"cve-2026-57193-asterisk-is-an-open-source-private-branch-exchange-and-telephony","title":"Asterisk LDAP filter injection in SIP username","severity":"info","exploited":false,"published_at":"2026-10-26T20:17:56.877+00:00","url":"https://junglewise.ai/threats/cve-2026-57193-asterisk-is-an-open-source-private-branch-exchange-and-telephony"},{"cve":"CVE-2026-57184","slug":"cve-2026-57184-asterisk-is-an-open-source-private-branch-exchange-and-telephony","title":"Asterisk out-of-bounds read in chan_ooh323 Q.931 parser","severity":"info","exploited":false,"published_at":"2026-10-26T20:17:56.517+00:00","url":"https://junglewise.ai/threats/cve-2026-57184-asterisk-is-an-open-source-private-branch-exchange-and-telephony"}],"vendor":{"hub":true,"name":"Asterisk","slug":"asterisk","description":"Asterisk is an open-source framework for building communications applications.","url":"https://junglewise.ai/threats/vendors/asterisk"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":14},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-57202","cvss":8.1,"slug":"cve-2026-57202-asterisk-is-an-open-source-private-branch-exchange-and-telephony","title":"Asterisk privilege escalation in REST Interface","severity":"high","exploited":false,"published_at":"2026-10-27T18:17:37.55+00:00","url":"https://junglewise.ai/threats/cve-2026-57202-asterisk-is-an-open-source-private-branch-exchange-and-telephony"},{"cve":"CVE-2026-57186","cvss":7.5,"slug":"cve-2026-57186-asterisk-is-an-open-source-private-branch-exchange-and-telephony","title":"Asterisk OOH323 Q.931 parser denial of service","severity":"high","exploited":false,"published_at":"2026-10-27T22:17:26.99+00:00","url":"https://junglewise.ai/threats/cve-2026-57186-asterisk-is-an-open-source-private-branch-exchange-and-telephony"},{"cve":"CVE-2026-57200","cvss":7.5,"slug":"cve-2026-57200-asterisk-is-an-open-source-private-branch-exchange-and-telephony","title":"Asterisk authorization bypass in ARI REST-over-WebSocket","severity":"high","exploited":false,"published_at":"2026-10-27T21:18:06.843+00:00","url":"https://junglewise.ai/threats/cve-2026-57200-asterisk-is-an-open-source-private-branch-exchange-and-telephony"},{"cve":"CVE-2026-57195","cvss":7.5,"slug":"cve-2026-57195-asterisk-is-an-open-source-private-branch-exchange-and-telephony","title":"Asterisk NULL pointer dereference in Manager Interface HTTP digest authentication","severity":"high","exploited":false,"published_at":"2026-10-27T21:18:06.633+00:00","url":"https://junglewise.ai/threats/cve-2026-57195-asterisk-is-an-open-source-private-branch-exchange-and-telephony"},{"cve":"CVE-2026-57201","cvss":7.5,"slug":"cve-2026-57201-asterisk-is-an-open-source-private-branch-exchange-and-telephony","title":"Asterisk H.323 stack buffer overflow in trace logging","severity":"high","exploited":false,"published_at":"2026-10-27T17:17:02.117+00:00","url":"https://junglewise.ai/threats/cve-2026-57201-asterisk-is-an-open-source-private-branch-exchange-and-telephony"},{"cve":"CVE-2026-57194","cvss":5.9,"slug":"cve-2026-57194-asterisk-is-an-open-source-private-branch-exchange-and-telephony","title":"Asterisk out-of-bounds write in chan_unistim DIALPAGE handling","severity":"medium","exploited":false,"published_at":"2026-10-27T17:17:01.62+00:00","url":"https://junglewise.ai/threats/cve-2026-57194-asterisk-is-an-open-source-private-branch-exchange-and-telephony"},{"cve":"CVE-2026-57203","slug":"cve-2026-57203-asterisk-is-an-open-source-private-branch-exchange-and-telephony","title":"Asterisk privilege escalation in ast_loggrabber via /tmp","severity":"info","exploited":false,"published_at":"2026-10-27T22:17:27.89+00:00","url":"https://junglewise.ai/threats/cve-2026-57203-asterisk-is-an-open-source-private-branch-exchange-and-telephony"},{"cve":"CVE-2026-57188","slug":"cve-2026-57188-asterisk-is-an-open-source-private-branch-exchange-and-telephony","title":"Asterisk stack buffer overflow in XMPP namespace prefix handling","severity":"info","exploited":false,"published_at":"2026-10-27T18:17:37.367+00:00","url":"https://junglewise.ai/threats/cve-2026-57188-asterisk-is-an-open-source-private-branch-exchange-and-telephony"},{"cve":"CVE-2026-57198","slug":"cve-2026-57198-asterisk-is-an-open-source-private-branch-exchange-and-telephony","title":"Asterisk T.140 RED heap buffer overflow","severity":"info","exploited":false,"published_at":"2026-10-27T17:17:01.963+00:00","url":"https://junglewise.ai/threats/cve-2026-57198-asterisk-is-an-open-source-private-branch-exchange-and-telephony"},{"cve":"CVE-2026-57197","slug":"cve-2026-57197-asterisk-is-an-open-source-private-branch-exchange-and-telephony","title":"Asterisk heap buffer overflow in OGG Speex format handler","severity":"info","exploited":false,"published_at":"2026-10-27T17:17:01.793+00:00","url":"https://junglewise.ai/threats/cve-2026-57197-asterisk-is-an-open-source-private-branch-exchange-and-telephony"}],"generated_at":"2026-11-09T03:07:00.176479+00:00","technologies":[{"name":"Asterisk","slug":"asterisk","vulnerabilities":14,"url":"https://junglewise.ai/threats/technologies/asterisk"},{"name":"Asterisk Certified Asterisk","slug":"certified-asterisk","vulnerabilities":12,"url":"https://junglewise.ai/threats/technologies/certified-asterisk"}]}