Known vulnerabilities in Certified Asterisk 20.7-cert8 - page 2

Vendor: Digium (Linux Support Services)
Software: Certified Asterisk
Version: 20.7-cert8
Software CPE: cpe:2.3:a:digium_linux_support_services:certified_asterisk:*:*:*:*:*:rv110w_wireless-n_vpn_firewall:*:*
Website:
Total vulnerabilities: 27
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Certified Asterisk version 20.7-cert8 Certified Asterisk 20.7-cert8 is affected by 27 vulnerabilities: 3 high, 12 medium, 12 low Critical High Medium Low

Vulnerabilities (27)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU125901 - Out-of-bounds read
CVE-2026-33069		 CWE-125 Medium
No
No
 20.7-cert10, 22.8-cert2 14.04.2026 SB2026030657
SB2026052528
#VU125899 - Use After Free
CVE-2026-32942		 CWE-416 High
No
No
 20.7-cert10, 22.8-cert2 14.04.2026 SB2026030657
SB2026052528
#VU123622 - Use After Free
CVE-2026-28799		 CWE-416 High
No
No
 20.7-cert10, 22.8-cert2 06.03.2026 SB2026030657
SB2026052528
#VU122443 - Incorrect Default Permissions
CVE-2026-23741		 CWE-276 Low
No
No
 20.7-cert9 06.02.2026 SB2026020664
#VU122442 - Uncontrolled Search Path Element
CVE-2026-23740		 CWE-427 Low
No
No
 20.7-cert9 06.02.2026 SB2026020664
#VU122441 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-23738		 CWE-79 Low
No
No
 20.7-cert9 06.02.2026 SB2026020664
#VU122440 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2026-23739		 CWE-611 Low
No
No
 20.7-cert9 06.02.2026 SB2026020664


Showing elements 21 - 40 out of 27