CVE-2026-57185

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

0.47% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 41.1% of scored records. A rank, not a probability.

NVD base score

6.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Awaiting Analysis. NVD last modified this record on 2026-10-28.

Red Hat severity

No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2026-10-27 16:40Z1 DAY AGO

Last updated

2026-10-27 16:40Z1 DAY AGO

Reserved

2026-06-24

Assigning CNA

GitHub_M

Record state

PUBLISHED

Severity

Medium (CVSS 6.5)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weaknesses

• CWE-126Buffer Over-readVariant
• CWE-170Improper Null TerminationBase

Data version

5.2

Document digest

06f21c2c04cb578684f6018bbb455e5934556110930399759155041359e015e2

• github.comhttps://github.com/asterisk/asterisk/security/advisories/GHSA-8jw3-ccr9-xrmfx_refsource_CONFIRM
• github.comhttps://github.com/asterisk/asterisk/commit/07aec894a1fdfa7fa989d3ab40fdf0dcda8005bbx_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/commit/1039bed76fa3248f58b6880e4b3f1421ef98b01fx_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/commit/1b2d99d8eb9206d37fd47115996f67fd28bd056fx_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/commit/3100a0d331affbf0995b8c57aaddb31cf3971f6ex_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/commit/57ce484a45b098de417f19265c95c64497782e36x_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/commit/919f2ffda03329c9014bedcb3c7789d38660c9edx_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/commit/dafff9fb60281817225f1ce6371a5aa2fbb967a4x_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/releases/tag/20.20.1x_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/releases/tag/21.12.3x_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/releases/tag/22.10.1x_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/releases/tag/23.4.1x_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/releases/tag/certified-20.7-cert11x_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/releases/tag/certified-22.8-cert3x_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/tree/24.0.0-pre1x_refsource_MISC