https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-23741.htmlhttps://patchthecve.com/cve/CVE-2026-23741.htmlWed, 17 Jun 2026 10:22:01 +0000NONE 0.0: Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, the asterisk/contrib/scripts/ast_coredumper runs as root, as noted by the NOTES tag on line 689 of the ast_coredumper file. The script will source the contenthttps://patchthecve.com/cve/CVE-2026-23740.htmlhttps://patchthecve.com/cve/CVE-2026-23740.htmlWed, 17 Jun 2026 10:22:01 +0000NONE 0.0: Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, when ast_coredumper writes its gdb init and output files to a directory that is world-writable (for example /tmp), an attacker with write permission(which is https://patchthecve.com/cve/CVE-2026-23739.htmlhttps://patchthecve.com/cve/CVE-2026-23739.htmlWed, 17 Jun 2026 10:22:01 +0000LOW 2.0: Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, the ast_xml_open() function in xml.c parses XML documents using libxml with unsafe parsing options that enable entity expansion and XInclude processing. Specihttps://patchthecve.com/cve/CVE-2026-23738.htmlhttps://patchthecve.com/cve/CVE-2026-23738.htmlWed, 17 Jun 2026 10:22:01 +0000LOW 3.5: Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, user supplied/control values for Cookies and any GET variable query Parameter are directly interpolated into the HTML of the page using ast_str_append. The enhttps://patchthecve.com/cve/CVE-2025-1131.htmlhttps://patchthecve.com/cve/CVE-2025-1131.htmlMon, 19 Oct 2026 16:10:00 +0000HIGH 7.8: A local privilege escalation vulnerability exists in the safe_asterisk script included with the Asterisk toolkit package. When Asterisk is started via this script (common in SysV init or FreePBX environments), it sources all .sh files located in /etc/asterisk/startup.d/ as root, without validating ohttps://patchthecve.com/cve/CVE-2025-54995.htmlhttps://patchthecve.com/cve/CVE-2025-54995.htmlWed, 17 Jun 2026 09:41:04 +0000MEDIUM 6.5: Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 18.26.4 and 18.9-cert17, RTP UDP ports and internal resources can leak due to a lack of session termination. This could result in leaks and resource exhaustion. This issue has been patched in versions 18.26.4https://patchthecve.com/cve/CVE-2025-49832.htmlhttps://patchthecve.com/cve/CVE-2025-49832.htmlWed, 17 Jun 2026 09:31:58 +0000MEDIUM 6.5: Asterisk is an open source private branch exchange and telephony toolkit. In versions up to and including 18.26.2, between 20.00.0 and 20.15.0, 20.7-cert6, 21.00.0, 22.00.0 through 22.5.0, there is a remote DoS and possible RCE condition in `asterisk/res/res_stir_shaken /verification.c` that can be https://patchthecve.com/cve/CVE-2025-47780.htmlhttps://patchthecve.com/cve/CVE-2025-47780.htmlWed, 17 Jun 2026 09:28:40 +0000HIGH 7.8: Asterisk is an open-source private branch exchange (PBX). Prior to versions 18.26.2, 20.14.1, 21.9.1, and 22.4.1 of Asterisk and versions 18.9-cert14 and 20.7-cert5 of certified-asterisk, trying to disallow shell commands to be run via the Asterisk command line interface (CLI) by configuring `cli_pehttps://patchthecve.com/cve/CVE-2025-47779.htmlhttps://patchthecve.com/cve/CVE-2025-47779.htmlWed, 17 Jun 2026 09:28:40 +0000HIGH 7.7: Asterisk is an open-source private branch exchange (PBX). Prior to versions 18.26.2, 20.14.1, 21.9.1, and 22.4.1 of Asterisk and versions 18.9-cert14 and 20.7-cert5 of certified-asterisk, SIP requests of the type MESSAGE (RFC 3428) authentication do not get proper alignment. An authenticated attackehttps://patchthecve.com/cve/CVE-2024-42491.htmlhttps://patchthecve.com/cve/CVE-2024-42491.htmlWed, 17 Jun 2026 07:49:33 +0000MEDIUM 5.7: Asterisk is an open-source private branch exchange (PBX). Prior to versions 18.24.3, 20.9.3, and 21.4.3 of Asterisk and versions 18.9-cert12 and 20.7-cert2 of certified-asterisk, if Asterisk attempts to send a SIP request to a URI whose host portion starts with `.1` or `[.1]`, and res_resolver_unbouhttps://patchthecve.com/cve/CVE-2024-42365.htmlhttps://patchthecve.com/cve/CVE-2024-42365.htmlWed, 17 Jun 2026 07:49:20 +0000HIGH 7.4: Asterisk is an open source private branch exchange (PBX) and telephony toolkit. Prior to asterisk versions 18.24.2, 20.9.2, and 21.4.2 and certified-asterisk versions 18.9-cert11 and 20.7-cert2, an AMI user with `write=originate` may change all configuration files in the `/etc/asterisk/` directory. https://patchthecve.com/cve/CVE-2023-49786.htmlhttps://patchthecve.com/cve/CVE-2023-49786.htmlWed, 17 Jun 2026 06:36:27 +0000HIGH 7.5: Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk prior to versions 18.20.1, 20.5.1, and 21.0.1; as well as certified-asterisk prior to 18.9-cert6; Asterisk is susceptible to a DoS due to a race condition in the hello handshake phase of the DTLS protocol when handhttps://patchthecve.com/cve/CVE-2023-49294.htmlhttps://patchthecve.com/cve/CVE-2023-49294.htmlWed, 17 Jun 2026 06:35:47 +0000MEDIUM 4.9: Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk prior to versions 18.20.1, 20.5.1, and 21.0.1, as well as certified-asterisk prior to 18.9-cert6, it is possible to read any arbitrary file even when the `live_dangerously` is not enabled. This allows arbitrary filhttps://patchthecve.com/cve/CVE-2023-37457.htmlhttps://patchthecve.com/cve/CVE-2023-37457.htmlWed, 17 Jun 2026 06:08:15 +0000HIGH 7.5: Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk versions 18.20.0 and prior, 20.5.0 and prior, and 21.0.0; as well as ceritifed-asterisk 18.9-cert5 and prior, the 'update' functionality of the PJSIP_HEADER dialplan function can exceed the available buffer space f