CVE-2026-57194

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

0.44% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 38.2% of scored records. A rank, not a probability.

NVD base score

5.9 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Awaiting Analysis. NVD last modified this record on 2026-10-28.

Red Hat severity

No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2026-10-27 16:52Z1 DAY AGO

Last updated

2026-10-27 16:52Z1 DAY AGO

Reserved

2026-06-24

Assigning CNA

GitHub_M

Record state

PUBLISHED

Severity

Medium (CVSS 5.9)

CNA CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

• CWE-787Out-of-bounds WriteBase

Data version

5.2

Document digest

2056fa6e79799bf50142a53e9f8997d091045b443f637f6e3f282f17cf5fd318

• github.comhttps://github.com/asterisk/asterisk/security/advisories/GHSA-3g56-cgrh-95p5x_refsource_CONFIRM
• github.comhttps://github.com/asterisk/asterisk/commit/430f423c84e4e32a462d907632b66c9793236e96x_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/commit/6da8e10c210d8e014c27c67235252e1dfc794446x_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/commit/6f414ec771eaa3318a4b2d28f70fa387196ae283x_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/commit/ce6e2233599b76bc30c33b4816b15609c8ddc8b6x_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/commit/d803b5370b05f39a6241b2556eb9894b02148e6ax_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/commit/fc3a1cb3c386c962bfca8cd9d533d1390d4ad933x_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/commit/ff65e4b0867bee12cdcb3a6219b976ee7ee08963x_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/releases/tag/20.20.1x_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/releases/tag/21.12.3x_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/releases/tag/22.10.1x_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/releases/tag/23.4.1x_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/releases/tag/certified-20.7-cert11x_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/releases/tag/certified-22.8-cert3x_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/tree/24.0.0-pre1x_refsource_MISC