CA
Product
Certified Asterisk
15
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 9Low 0
Watch
Add Certified Asterisk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-23741 | 8.8 | Feb 6 | ast_coredumper running as root sources ast_debug_tools.conf from /etc/asterisk; potentially leading to privilege escalation Affected: through 18.9; 20.7; 20.7; 20.7; 20.7; 20.7; +5 more |
| CVE-2023-37457 | 8.2 | Dec 14 | Asterisk is an open source private branch exchange and telephony toolkit Affected: 13.13.0; 13.13.0; 13.13.0; 13.13.0; 13.13.0; 13.13.0; +22 more |
| CVE-2026-23740 | 7.8 | Feb 6 | Asterisk vulnerable to potential privilege escalation Affected: 13.13.0; 13.13.0; 13.13.0; 13.13.0; 13.13.0; 13.13.0; +34 more |
| CVE-2025-1131 | 7.8 | Sep 23 | Asterisk Unsafe Shell Sourcing in safe_asterisk Leads to Local Privilege Escalation Affected: 18.9; 18.9; 18.9; 18.9; 18.9; 18.9; +20 more |
| CVE-2025-47780 | 7.8 | May 22 | cli_permissions.conf: deny option does not work for disallowing shell commands Affected: before 18.9; 18.9; 18.9; 18.9; 18.9; 18.9; +18 more |
| CVE-2023-49294 | 7.5 | Dec 14 | Asterisk is an open source private branch exchange and telephony toolkit Affected: 13.13.0; 13.13.0; 13.13.0; 13.13.0; 13.13.0; 13.13.0; +22 more |
Showing 6