Skip to content
OpenAdvisories

Vendor

certified-asterisk

1 known vulnerabilities.

Products

certified-asterisk 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-57200

    Asterisk: ARI REST-over-WebSocket read-only bypass allows arbitrary module path load and conditional RCE

    Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 22.8-cert3, an authenticated attacker with read-only permissions for the `Asterisk REST Interface (ARI)` may, …

    asterisk certified-asterisk asterisk certified-asterisk Debian Ubuntu