Known vulnerabilities in Certified Asterisk 20.7-cert3

Vendor: Digium (Linux Support Services)
Software: Certified Asterisk
Version: 20.7-cert3
Software CPE: cpe:2.3:a:digium_linux_support_services:certified_asterisk:*:*:*:*:*:rv110w_wireless-n_vpn_firewall:*:*
Website:
Total vulnerabilities: 30
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Certified Asterisk version 20.7-cert3 Certified Asterisk 20.7-cert3 is affected by 30 vulnerabilities: 3 high, 13 medium, 14 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU135557 - Out-of-bounds write
CVE-2026-57194		 CWE-787 Low
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110
#VU135556 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-57200		 CWE-22 Low
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110
#VU135555 - Use After Free
CVE-2026-57187		 CWE-416 Low
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110
#VU135553 - Out-of-bounds read
CVE-2026-57184		 CWE-125 Medium
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110
#VU135552 - Insufficient Granularity of Access Control
CVE-2026-57202		 CWE-1220 Low
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110
#VU135551 - Out-of-bounds write
CVE-2026-57189		 CWE-787 Medium
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110
#VU135549 - Heap-based Buffer Overflow
CVE-2026-57198		 CWE-122 Medium
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110
#VU135548 - Buffer over-read
CVE-2026-57185		 CWE-126 Low
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110
#VU135547 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-57196		 CWE-79 Medium
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110
#VU135545 - Out-of-bounds write
CVE-2026-57192		 CWE-787 Low
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110
#VU135544 - Stack-based buffer overflow
CVE-2026-57201		 CWE-121 Medium
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110
#VU135542 - NULL Pointer Dereference
CVE-2026-57195		 CWE-476 Medium
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110
#VU135541 - Out-of-bounds write
CVE-2026-57199		 CWE-787 Medium
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110
#VU135539 - Stack-based buffer overflow
CVE-2026-57188		 CWE-121 Low
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110
#VU135538 - Stack-based buffer overflow
CVE-2026-57191		 CWE-121 Medium
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110
#VU135537 - Heap-based Buffer Overflow
CVE-2026-57197		 CWE-122 Medium
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110
#VU135536 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-57190		 CWE-89 Low
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110
#VU135534 - Improper Neutralization of Special Elements in Data Query Logic
CVE-2026-57193		 CWE-943 Medium
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110
#VU135532 - Untrusted Search Path
CVE-2026-57203		 CWE-426 Medium
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110
#VU125904 - Stack-based buffer overflow
CVE-2026-25994		 CWE-121 High
Public exploit available
No
 20.7-cert10, 22.8-cert2 14.04.2026 SB2026030657
SB2026041668
SB2026052528


Showing elements 1 - 20 out of 30