https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-23741.htmlhttps://patchthecve.com/cve/CVE-2026-23741.htmlWed, 17 Jun 2026 10:22:01 +0000NONE 0.0: Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, the asterisk/contrib/scripts/ast_coredumper runs as root, as noted by the NOTES tag on line 689 of the ast_coredumper file. The script will source the contenthttps://patchthecve.com/cve/CVE-2026-23740.htmlhttps://patchthecve.com/cve/CVE-2026-23740.htmlWed, 17 Jun 2026 10:22:01 +0000NONE 0.0: Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, when ast_coredumper writes its gdb init and output files to a directory that is world-writable (for example /tmp), an attacker with write permission(which is https://patchthecve.com/cve/CVE-2026-23739.htmlhttps://patchthecve.com/cve/CVE-2026-23739.htmlWed, 17 Jun 2026 10:22:01 +0000LOW 2.0: Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, the ast_xml_open() function in xml.c parses XML documents using libxml with unsafe parsing options that enable entity expansion and XInclude processing. Specihttps://patchthecve.com/cve/CVE-2026-23738.htmlhttps://patchthecve.com/cve/CVE-2026-23738.htmlWed, 17 Jun 2026 10:22:01 +0000LOW 3.5: Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, user supplied/control values for Cookies and any GET variable query Parameter are directly interpolated into the HTML of the page using ast_str_append. The enhttps://patchthecve.com/cve/CVE-2025-1131.htmlhttps://patchthecve.com/cve/CVE-2025-1131.htmlMon, 19 Oct 2026 16:10:00 +0000HIGH 7.8: A local privilege escalation vulnerability exists in the safe_asterisk script included with the Asterisk toolkit package. When Asterisk is started via this script (common in SysV init or FreePBX environments), it sources all .sh files located in /etc/asterisk/startup.d/ as root, without validating ohttps://patchthecve.com/cve/CVE-2025-57767.htmlhttps://patchthecve.com/cve/CVE-2025-57767.htmlWed, 17 Jun 2026 09:43:23 +0000HIGH 7.5: Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.15.2, 21.10.2, and 22.5.2, if a SIP request is received with an Authorization header that contains a realm that wasn't in a previous 401 response's WWW-Authenticate header, or an Authorization header with https://patchthecve.com/cve/CVE-2025-54995.htmlhttps://patchthecve.com/cve/CVE-2025-54995.htmlWed, 17 Jun 2026 09:41:04 +0000MEDIUM 6.5: Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 18.26.4 and 18.9-cert17, RTP UDP ports and internal resources can leak due to a lack of session termination. This could result in leaks and resource exhaustion. This issue has been patched in versions 18.26.4https://patchthecve.com/cve/CVE-2025-49832.htmlhttps://patchthecve.com/cve/CVE-2025-49832.htmlWed, 17 Jun 2026 09:31:58 +0000MEDIUM 6.5: Asterisk is an open source private branch exchange and telephony toolkit. In versions up to and including 18.26.2, between 20.00.0 and 20.15.0, 20.7-cert6, 21.00.0, 22.00.0 through 22.5.0, there is a remote DoS and possible RCE condition in `asterisk/res/res_stir_shaken /verification.c` that can be https://patchthecve.com/cve/CVE-2025-47780.htmlhttps://patchthecve.com/cve/CVE-2025-47780.htmlWed, 17 Jun 2026 09:28:40 +0000HIGH 7.8: Asterisk is an open-source private branch exchange (PBX). Prior to versions 18.26.2, 20.14.1, 21.9.1, and 22.4.1 of Asterisk and versions 18.9-cert14 and 20.7-cert5 of certified-asterisk, trying to disallow shell commands to be run via the Asterisk command line interface (CLI) by configuring `cli_pehttps://patchthecve.com/cve/CVE-2025-47779.htmlhttps://patchthecve.com/cve/CVE-2025-47779.htmlWed, 17 Jun 2026 09:28:40 +0000HIGH 7.7: Asterisk is an open-source private branch exchange (PBX). Prior to versions 18.26.2, 20.14.1, 21.9.1, and 22.4.1 of Asterisk and versions 18.9-cert14 and 20.7-cert5 of certified-asterisk, SIP requests of the type MESSAGE (RFC 3428) authentication do not get proper alignment. An authenticated attackehttps://patchthecve.com/cve/CVE-2024-57520.htmlhttps://patchthecve.com/cve/CVE-2024-57520.htmlWed, 17 Jun 2026 08:13:39 +0000CRITICAL 9.8: Insecure Permissions vulnerability in asterisk v22 allows a remote attacker to execute arbitrary code via the action_createconfig function. NOTE: this is disputed by the Supplier because the impact is limited to creating empty files outside of the Asterisk product directory (aka directory traversal)https://patchthecve.com/cve/CVE-2024-53566.htmlhttps://patchthecve.com/cve/CVE-2024-53566.htmlWed, 17 Jun 2026 08:08:59 +0000MEDIUM 5.5: An issue in the action_listcategories() function of Sangoma Asterisk v22/22.0.0/22.0.0-rc1/22.0.0-rc2/22.0.0-pre1 allows attackers to execute a path traversal.https://patchthecve.com/cve/CVE-2024-42491.htmlhttps://patchthecve.com/cve/CVE-2024-42491.htmlWed, 17 Jun 2026 07:49:33 +0000MEDIUM 5.7: Asterisk is an open-source private branch exchange (PBX). Prior to versions 18.24.3, 20.9.3, and 21.4.3 of Asterisk and versions 18.9-cert12 and 20.7-cert2 of certified-asterisk, if Asterisk attempts to send a SIP request to a URI whose host portion starts with `.1` or `[.1]`, and res_resolver_unbouhttps://patchthecve.com/cve/CVE-2024-42365.htmlhttps://patchthecve.com/cve/CVE-2024-42365.htmlWed, 17 Jun 2026 07:49:20 +0000HIGH 7.4: Asterisk is an open source private branch exchange (PBX) and telephony toolkit. Prior to asterisk versions 18.24.2, 20.9.2, and 21.4.2 and certified-asterisk versions 18.9-cert11 and 20.7-cert2, an AMI user with `write=originate` may change all configuration files in the `/etc/asterisk/` directory. https://patchthecve.com/cve/CVE-2024-35190.htmlhttps://patchthecve.com/cve/CVE-2024-35190.htmlWed, 17 Jun 2026 07:34:30 +0000MEDIUM 5.8: Asterisk is an open source private branch exchange and telephony toolkit. After upgrade to 18.23.0, ALL unauthorized SIP requests are identified as PJSIP Endpoint of local asterisk server. This vulnerability is fixed in 18.23.1, 20.8.1, and 21.3.1. https://patchthecve.com/cve/CVE-2023-49786.htmlhttps://patchthecve.com/cve/CVE-2023-49786.htmlWed, 17 Jun 2026 06:36:27 +0000HIGH 7.5: Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk prior to versions 18.20.1, 20.5.1, and 21.0.1; as well as certified-asterisk prior to 18.9-cert6; Asterisk is susceptible to a DoS due to a race condition in the hello handshake phase of the DTLS protocol when handhttps://patchthecve.com/cve/CVE-2023-49294.htmlhttps://patchthecve.com/cve/CVE-2023-49294.htmlWed, 17 Jun 2026 06:35:47 +0000MEDIUM 4.9: Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk prior to versions 18.20.1, 20.5.1, and 21.0.1, as well as certified-asterisk prior to 18.9-cert6, it is possible to read any arbitrary file even when the `live_dangerously` is not enabled. This allows arbitrary filhttps://patchthecve.com/cve/CVE-2023-37457.htmlhttps://patchthecve.com/cve/CVE-2023-37457.htmlWed, 17 Jun 2026 06:08:15 +0000HIGH 7.5: Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk versions 18.20.0 and prior, 20.5.0 and prior, and 21.0.0; as well as ceritifed-asterisk 18.9-cert5 and prior, the 'update' functionality of the PJSIP_HEADER dialplan function can exceed the available buffer space f