Known vulnerabilities in Certified Asterisk 22.8-cert1-rc1

Vendor: Digium (Linux Support Services)
Software: Certified Asterisk
Version: 22.8-cert1-rc1
Software CPE: cpe:2.3:a:digium_linux_support_services:certified_asterisk:*:*:*:*:*:rv110w_wireless-n_vpn_firewall:*:*
Website:
Total vulnerabilities: 24
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Certified Asterisk version 22.8-cert1-rc1 Certified Asterisk 22.8-cert1-rc1 is affected by 24 vulnerabilities: 3 high, 13 medium, 8 low Critical High Medium Low

Vulnerabilities (24)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU135559 - Numeric Range Comparison Without Minimum Check
CVE-2026-57186		 CWE-839 Medium
No
No
 22.8-cert3 26.06.2026 SB20260626110
#VU135557 - Out-of-bounds write
CVE-2026-57194		 CWE-787 Low
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110
#VU135556 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-57200		 CWE-22 Low
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110
#VU135555 - Use After Free
CVE-2026-57187		 CWE-416 Low
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110
#VU135553 - Out-of-bounds read
CVE-2026-57184		 CWE-125 Medium
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110
#VU135552 - Insufficient Granularity of Access Control
CVE-2026-57202		 CWE-1220 Low
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110
#VU135551 - Out-of-bounds write
CVE-2026-57189		 CWE-787 Medium
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110
#VU135549 - Heap-based Buffer Overflow
CVE-2026-57198		 CWE-122 Medium
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110
#VU135548 - Buffer over-read
CVE-2026-57185		 CWE-126 Low
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110
#VU135547 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-57196		 CWE-79 Medium
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110
#VU135545 - Out-of-bounds write
CVE-2026-57192		 CWE-787 Low
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110
#VU135544 - Stack-based buffer overflow
CVE-2026-57201		 CWE-121 Medium
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110
#VU135542 - NULL Pointer Dereference
CVE-2026-57195		 CWE-476 Medium
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110
#VU135541 - Out-of-bounds write
CVE-2026-57199		 CWE-787 Medium
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110
#VU135539 - Stack-based buffer overflow
CVE-2026-57188		 CWE-121 Low
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110
#VU135538 - Stack-based buffer overflow
CVE-2026-57191		 CWE-121 Medium
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110
#VU135537 - Heap-based Buffer Overflow
CVE-2026-57197		 CWE-122 Medium
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110
#VU135536 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-57190		 CWE-89 Low
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110
#VU135534 - Improper Neutralization of Special Elements in Data Query Logic
CVE-2026-57193		 CWE-943 Medium
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110
#VU135532 - Untrusted Search Path
CVE-2026-57203		 CWE-426 Medium
No
No
 20.7-cert11, 22.8-cert3 26.06.2026 SB20260626110


Showing elements 1 - 20 out of 24