{
  "cveId": "CVE-2026-57195",
  "url": "https://patchblox.com/security/cve/CVE-2026-57195",
  "summary": "CVE-2026-57195 is fixed in asterisk on 1 platform by DEBIAN-CVE-2026-57195 (version 1:22.10.1\u002Bdfsg\u002B~cs6.17.60671434-1), released October 28, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "asterisk: Asterisk is an open source private branch exchange and telephony toolkit",
  "description": "Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, a NULL pointer dereference in the \u0060Asterisk Manager Interface (AMI)\u0060 may allow an unauthenticated attacker to crash Asterisk when \u0060Digest Authentication\u0060 is used via \u0060HTTP\u0060. The Asterisk \u0060HTTP\u0060 web server, AMI, and AMI access via \u0060HTTP\u0060 must all be enabled; each is disabled by default. The attacker must be able to connect to the \u0060HTTP\u0060 server, which binds only to \u0060127.0.0.1\u0060 by default even when enabled. This issue is fixed in Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3.",
  "published": "2026-10-27T21:18:06Z",
  "severity": "high",
  "cvss": 7.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00573,
  "epssPercentile": 0.47629,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "asterisk",
      "release": "Debian 14",
      "fixedVersion": "1:22.10.1\u002Bdfsg\u002B~cs6.17.60671434-1",
      "fix": "DEBIAN-CVE-2026-57195",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-57195",
      "released": "2026-10-28T21:27:11Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T07:25:28Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}