Login Request a demo
AS
Product
asterisk
by asterisk · last CVE Oct 27, 2026
45
CVEs
0
On KEV
8.8
Max CVSS
20
New 30D
Vulnerabilities45In the news0Timeline
Severity mix
Critical 0High 13Medium 9Low 4
Severity
All severities45Critical0High13Medium9Low4
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add asterisk to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-57199
New
2.3–Oct 27
Asterisk: Asterisk app_sms.c copies externally controlled SMS lengths into fixed in-struct buffers
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-57189
New
2.3–Oct 27
Asterisk: Possible RED T.140 Generation Accumulation OOB Write
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-57198
New
2.3–Oct 27
Asterisk: Possible RED T.140 Heap Buffer Overflow
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-57196
New
2.3
1%
Oct 26
Asterisk: Reflected XSS in Phone Provisioning HTTP Error Pages
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
Showing 4