Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

asterisk Vulnerabilities & CVE List (Oct 2026) | CyStack

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-23741`ast_coredumper running as root sources ast_debug_tools.conf from /etc/asterisk; potentially leading to privilege escalation	Exploitation statusNot exploited	FixYes	Affected productasterisk	Published02/06/2026	SeverityInformational
`CVE-2026-23740`Asterisk vulnerable to potential privilege escalation	Exploitation statusNot exploited	FixYes	Affected productasterisk	Published02/06/2026
`CVE-2026-23739`Asterisk xml.c uses unsafe XML_PARSE_NOENT leading to potential XXE Injection	Exploitation statusNot exploited	FixYes	Affected productasterisk	Published
`CVE-2026-23738`The Asterisk embedded web server 's /httpstatus page echos user supplied values(cookie and query string) without sanitization	Exploitation statusNot exploited	FixYes	Affected productasterisk
`CVE-2025-1131`Asterisk Unsafe Shell Sourcing in safe_asterisk Leads to Local Privilege Escalation	Exploitation statusActively exploited	FixNo	Affected productasterisk
`CVE-2025-57767`Asterisk can crash from a specifically malformed Authorization header in an incoming SIP request	Exploitation statusNot exploited	FixYes	Affected productasterisk	Published
`CVE-2025-54995`Asterisk remotely exploitable leak of RTP UDP ports and internal resources	Exploitation statusActively exploited	FixYes	Affected productasterisk	Published
`CVE-2025-49832`Asterisk is Vulnerable to Remote DoS and possible RCE Attacks During Memory Allocation	Exploitation statusActively exploited	FixYes	Affected productasterisk	Published
`CVE-2025-47780`cli_permissions.conf: deny option does not work for disallowing shell commands	Exploitation statusActively exploited	FixNo	Affected productasterisk	Published
`CVE-2025-47779`Using malformed From header can forge identity with ";" or NULL in name portion	Exploitation statusActively exploited	FixNo	Affected productasterisk	Published

68 Results | Page 1 of 7

Security vulnerabilities from asterisk

asterisk

Filters

Run an in-depth assessment with complete web risk management

Popular asterisk products