CVE-2026-57202

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated Asterisk REST Interface (ARI) attacker with read-only privileges may use `setChannelVar` to execute write dialplan functions, including `FILE()` writes, even when `live_dangerously` in `asterisk.conf` is set to no. The Asterisk HTTP web server must be enabled and reachable, and the attacker must already have valid `read-only ARI credentials`. HTTP is disabled by default and binds only to 127.0.0.1 by default even when enabled. This issue is fixed in Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3.

• CWE-267
• CWE-1220

• https://github.com/asterisk/asterisk/commit/8f8ccaf70a80e518147b0c35c0c252de4735446f
• https://github.com/asterisk/asterisk/commit/92a5dd1003b737ae1cd2df4e60b73beb8d5e42bb
• https://github.com/asterisk/asterisk/commit/ba04e7f1f98887c3c6e0dc4ddce663021f7e948a
• https://github.com/asterisk/asterisk/commit/bf9354267557ef6d6b75f5304faa243f595a5a66
• https://github.com/asterisk/asterisk/commit/caa4d50d9c3bf04fc979b5b2cdc5dc425772d845
• https://github.com/asterisk/asterisk/commit/d47b0b6e5a384746db194f751b53d559aba8dba9
• https://github.com/asterisk/asterisk/commit/d8614505b27688dec3a1d14554f52fda94712928
• https://github.com/asterisk/asterisk/releases/tag/20.20.1
• https://github.com/asterisk/asterisk/releases/tag/21.12.3
• https://github.com/asterisk/asterisk/releases/tag/22.10.1
• https://github.com/asterisk/asterisk/releases/tag/23.4.1
• https://github.com/asterisk/asterisk/releases/tag/certified-20.7-cert11
• https://github.com/asterisk/asterisk/releases/tag/certified-22.8-cert3
• https://github.com/asterisk/asterisk/security/advisories/GHSA-vrfp-mg3q-3959
• https://github.com/asterisk/asterisk/tree/24.0.0-pre1

Published

Oct 27, 2026

Last Modified

Oct 28, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-57197Asterisk is an open source private branch exchange and telep…7.7
• CVE-2026-57198Asterisk is an open source private branch exchange and telep…2.3
• CVE-2026-57199Asterisk is an open source private branch exchange and telep…2.3
• CVE-2026-5720miniupnpd contains an integer underflow vulnerability in SOA…9.1
• CVE-2026-57200Asterisk is an open source private branch exchange and telep…7.5
• CVE-2026-57201Asterisk is an open source private branch exchange and telep…7.5
• CVE-2026-57203Asterisk is an open source private branch exchange and telep…6.9
• CVE-2026-57204pypdf is a free and open-source pure-python PDF library. Pri…6.5
• CVE-2026-57205SimpleChat is a secure AI conversation application with pers…4.3
• CVE-2026-57206SimpleChat is a secure AI conversation application with pers…8.6
• CVE-2026-57207NetBox MCP Server is a simple read-only Model Context Protoc…5.9
• CVE-2026-57208Entire CLI hooks into Git workflows to capture AI agent sess…6.2