CVE-2026-57202

highpriority · track · 0DE

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

— EPSS

CVSS 8.1 · high

Is it mine?

12 products

Check your exposure

Who says so?

1 sources

cert_bund

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated Asterisk REST Interface (ARI) attacker with read-only privileges may use `setChannelVar` to execute write dialplan functions, including `FILE()` writes, even when `live_dangerously` in `asterisk.conf` is set to no. The Asterisk HTTP web server must be enabled and reachable, and the attacker must already have valid `read-only ARI credentials`. HTTP is disabled by default and binds only to 127.0.0.1 by default even when enabled. This issue is fixed in Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3.

cvss

Technical severity, 0–10. One row per scoring source.

8.1

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.18.1highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Nsecondary · security-advisories@github.comexploitability 2.8 · impact 5.2

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-1220USprimaryCWE-267USprimaryCWE-1220USCWE-267US

affected products (12)

Products and version ranges known to be affected.

Digium Certified Asterisk <20.7-cert11all versionscert_bundDE
Digium Certified Asterisk <22.8-cert3all versionscert_bundDE
Open Source Asterisk <20.20.1all versionscert_bundDE
Open Source Asterisk <21.12.3all versionscert_bundDE
Open Source Asterisk <22.10.1all versionscert_bundDE
Open Source Asterisk <23.4.1all versionscert_bundDE
Digium Certified Asterisk< 20.7-cert11cert_bundDE
Digium Certified Asterisk< 22.8-cert3cert_bundDE
Open Source Asterisk< 20.20.1cert_bundDE
Open Source Asterisk< 21.12.3cert_bundDE
Open Source Asterisk< 22.10.1cert_bundDE
Open Source Asterisk< 23.4.1cert_bundDE

advisories (1)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2026-2094Digium Certified Asterisk: Mehrere SchwachstellenDeutsch2026-06-25csaf · cert_bundDE
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Digium Certified Asterisk und Asterisk ausnutzen, um Speicherfehler und Denial-of-Service-Zustände auszulösen, Informationen offenzulegen, Sitzungen zu übernehmen, Sicherheitsmechanismen und Berechtigungen zu umgehen, beliebige SQL- oder LDAP-Abfragen auszuführen sowie unter bestimmten Voraussetzungen beliebigen Programmcode auszuführen.

sources

Which sources assert this record, and when.

cert_bund NVD CVE.org MITRE

published 2026-10-27modified 2026-10-27

related (232)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2026-56155US	—OT critical	0.35% (28th)	KEV	2026-07-14
Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally.
CVE-2026-33825US	—OT critical	6.75% (94th)	KEV	2026-04-14
Insufficient granularity of access control in Microsoft Defender allows an authorized attacker to elevate privileges locally.
CVE-2025-41244US	—OT critical	8.63% (95th)	KEV	2025-09-29
VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VM…
CVE-2025-31201US	—OT critical	13.9% (97th)	KEV	2025-04-16
This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1. An attacker with a…
CVE-2024-51567US	critical9.8OT critical	84.4% (100th)	KEV	2024-10-29
upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6 allows remote attackers to bypass authentication and execute arbitrary commands via /dataBas…

+227 more

references (15) nvd

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan