CE
Product
certified-asterisk
30
CVEs
0
On KEV
9.8
Max CVSS
19
New 30D
Severity mix
Critical 3High 11Medium 8Low 4
Watch
Add certified-asterisk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-57199 New | 2.3 | Oct 27 | Asterisk: Asterisk app_sms.c copies externally controlled SMS lengths into fixed in-struct buffers Affected: < 20.7-cert11; >= 22.8-cert1-pre1, < 22.8-cert3 |
| CVE-2026-57189 New | 2.3 | Oct 27 | Asterisk: Possible RED T.140 Generation Accumulation OOB Write Affected: < 20.7-cert11; >= 22.8-cert1-pre1, < 22.8-cert3 |
| CVE-2026-57198 New | 2.3 | Oct 27 | Asterisk: Possible RED T.140 Heap Buffer Overflow Affected: < 20.7-cert11; >= 22.8-cert1-pre1, < 22.8-cert3 |
| CVE-2026-57196 New | 2.3 | Oct 26 | Asterisk: Reflected XSS in Phone Provisioning HTTP Error Pages Affected: < 20.7-cert11; >= 22.8-cert1-pre1, < 22.8-cert3 |
Showing 4