Certified asterisk
This hub aggregates every CVE we track for Certified asterisk, a product in the communications space. Use it to gauge the current risk picture and drill into individual advisories.
77
CVEs tracked
5
Critical
26
High
0
In CISA KEV
Severity distribution
MEDIUM40HIGH26CRITICAL5LOW4
Monthly trend
0
0
0
0
0
0
0
2
0
0
2
1
0
0
0
0
4
0
0
0
0
0
0
0
2024-102026-09
Latest CVEs
The 15 most recently published vulnerabilities affecting Certified asterisk.
- CVE-2026-23741ast_coredumper running as root sources ast_debug_tools.conf from /etc/asterisk; potentially leading to privilege escalation
- CVE-2026-23740Asterisk vulnerable to potential privilege escalation
- CVE-2026-23739Asterisk xml.c uses unsafe XML_PARSE_NOENT leading to potential XXE Injection2.0
- CVE-2026-23738The Asterisk embedded web server 's /httpstatus page echos user supplied values(cookie and query string) without sanitization3.5
- CVE-2025-1131Asterisk Unsafe Shell Sourcing in safe_asterisk Leads to Local Privilege Escalation7.8
- CVE-2025-54995Asterisk remotely exploitable leak of RTP UDP ports and internal resources6.5
- CVE-2025-49832Asterisk is Vulnerable to Remote DoS and possible RCE Attacks During Memory Allocation6.5
- CVE-2025-47780cli_permissions.conf: deny option does not work for disallowing shell commands7.8
- CVE-2025-47779Using malformed From header can forge identity with ";" or NULL in name portion7.7
- CVE-2024-42491A malformed Contact or Record-Route URI in an incoming SIP request can cause Asterisk to crash when res_resolver_unbound is used5.7
- CVE-2024-42365Asterisk allows `Write=originate` as sufficient permissions for code execution / `System()` dialplan7.4
- CVE-2023-49786Asterisk susceptible to Denial of Service via DTLS Hello packets during call initiation7.5
- CVE-2023-37457Asterisk's PJSIP_HEADER dialplan function can overwrite memory/cause crash when using 'update'7.5
- CVE-2023-49294Asterisk Path Traversal vulnerability4.9
- CVE-2022-42706An issue was discovered in Sangoma Asterisk through 16.28, 17 and 18 through 18.14, 19 through 19.6, and certified through 18.9-cert1. GetConfig, via Asterisk Manager Interface, allows a connected ...4.9
Product normalization is registry-driven with AI assist and human review. How it works