Digium Certified Asterisk

Name: Digium Certified Asterisk
Brand: Digium

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

unpatched

by severity

4critical10high7medium0low

updated 2026-10-28

vulnerabilities (35)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-7284US	high7.5	66.2% (99th)	Exploit	13.18-cert3	2018-02-22	< 13.18-cert3
CVE-2018-7286US	medium6.5	52.7% (99th)	Exploit	13.18-cert3	2018-02-22	< 13.18-cert3
CVE-2024-42365US	high8.8	4.70% (92nd)	Exploit	18.9-cert11	2024-08-08	2 versions
CVE-2021-26714US	critical9.8	2.52% (85th)	Exploit	16.8-cert6	2021-03-29	< 16.8-cert6
CVE-2023-49294US	high7.5	45.3% (99th)	—	18.9-cert6	2023-12-14	< 18.9-cert6
CVE-2018-7287US	medium5.9	11.5% (96th)	—	13.18-cert3	2018-02-22	< 13.18-cert3
CVE-2023-49786US	medium5.9	5.29% (93rd)	—	18.9-cert6	2023-12-14	< 18.9-cert6
CVE-2018-7285US	high7.5	5.04% (92nd)	—	13.18-cert3	2018-02-22	< 13.18-cert3
CVE-2021-37706US	critical9.8	4.92% (92nd)	—	16.8-cert13	2021-12-22	< 16.8-cert13
CVE-2022-21723US	critical9.1	4.36% (91st)	—	16.8-cert13	2022-01-27	< 16.8-cert13
CVE-2020-35776US	medium6.5	4.05% (91st)	—	16.8-cert6	2021-02-18	< 16.8-cert6
CVE-2022-23608US	critical9.8	4.02% (91st)	—	16.8-cert13	2022-02-22	< 16.8-cert13
CVE-2021-26712US	high7.5OT elevated	3.63% (90th)	—	16.8-cert6	2021-02-18	< 16.8-cert6
CVE-2018-1000099US	high7.5	3.39% (89th)	—	13.18-cert3	2018-03-13	< 13.18-cert3
CVE-2018-1000098US	high7.5	3.32% (89th)	—	13.18-cert3	2018-03-13	< 13.18-cert3
CVE-2021-26906US	medium5.9	2.55% (85th)	—	16.8-cert6	2021-02-18	< 16.8-cert6
CVE-2021-26717US	high7.5	2.20% (82nd)	—	16.8-cert6	2021-02-18	< 16.8-cert6
CVE-2026-57193US	—	1.96% (80th)	—	20.7-cert11	2026-10-26	2 versions
CVE-2022-42705US	medium6.5	1.32% (71st)	—	18.9-cert3	2022-12-05	< 18.9-cert3
CVE-2022-37325US	high7.5	1.24% (69th)	—	18.9-cert3	2022-12-05	< 18.9-cert3
CVE-2022-42706US	medium4.9	1.18% (67th)	—	18.9-cert3	2022-12-05	< 18.9-cert3
CVE-2023-37457US	high8.2	1.12% (66th)	—	18.9-cert6	2023-12-14	< 18.9-cert6
CVE-2026-57200US	—OT elevated	0.88% (59th)	—	22.8-cert3	2026-10-27	2 versions
CVE-2026-57196US	—	0.77% (55th)	—	20.7-cert11	2026-10-26	2 versions
CVE-2026-57189US	—	0.74% (54th)	—	22.8-cert3	2026-10-27	2 versions
CVE-2026-57201US	—	0.70% (53rd)	—	22.8-cert3	2026-10-27	2 versions
CVE-2026-57190US	—	0.68% (52nd)	—	20.7-cert11	2026-10-27	2 versions
CVE-2026-57192US	—	0.65% (51st)	—	22.8-cert3	2026-10-27	2 versions
CVE-2026-57186US	—	0.60% (49th)	—	22.8-cert3	2026-10-27	2 versions
CVE-2026-57184US	—	0.56% (46th)	—	22.8-cert3	2026-10-26	2 versions
CVE-2026-57197US	—	0.53% (45th)	—	22.8-cert3	2026-10-27	2 versions
CVE-2026-57188US	—	0.52% (44th)	—	20.7-cert11	2026-10-27	2 versions
CVE-2026-57199US	—	0.48% (41st)	—	22.8-cert3	2026-10-27	2 versions
CVE-2026-57185US	—	0.48% (41st)	—	22.8-cert3	2026-10-27	2 versions
CVE-2026-57202US	—	0.44% (38th)	—	22.8-cert3	2026-10-27	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write7 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4 CVEs
CWE-125Out-of-bounds Read3 CVEs
CWE-476NULL Pointer Dereference3 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2 CVEs
CWE-1220Insufficient Granularity of Access Control2 CVEs
CWE-267Privilege Defined With Unsafe Actions2 CVEs
CWE-416Use After Free2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)35 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan