CVE-2026-57201

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

0.70% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 53.0% of scored records. A rank, not a probability.

NVD base score

7.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Awaiting Analysis. NVD last modified this record on 2026-10-28.

Red Hat severity

No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2026-10-27 16:56Z2 DAYS AGO

Last updated

2026-10-27 16:56Z2 DAYS AGO

Reserved

2026-06-24

Assigning CNA

GitHub_M

Record state

PUBLISHED

Severity

High (CVSS 7.5)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

• CWE-787Out-of-bounds WriteBase

Data version

5.2

Document digest

b327fb0015313734e4e3956fc79eb4115d75361a3d344e49c24a4f01521459d9

• github.comhttps://github.com/asterisk/asterisk/security/advisories/GHSA-x348-j6c9-77f3x_refsource_CONFIRM
• github.comhttps://github.com/asterisk/asterisk/commit/2d7b8c8dc13d9ead8b6f36cc38b6dd91cd4abd3ax_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/commit/33f62e351642edd9c58ef97b0002132722546af9x_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/commit/875ac7413de0b7068cd12d0da2f140cd06ba9357x_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/commit/ac0a64dec6d4231bf005a68da6af3e02bb311634x_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/commit/bf0c9a906892bc0f91fa753476e326919e4e30e5x_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/commit/c4d9b4defe83f74523880fd630c02c49683786a3x_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/commit/fff256d0539e96f70ac315844d72e9d540f03a4cx_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/releases/tag/20.20.1x_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/releases/tag/21.12.3x_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/releases/tag/22.10.1x_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/releases/tag/23.4.1x_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/releases/tag/certified-20.7-cert11x_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/releases/tag/certified-22.8-cert3x_refsource_MISC
• github.comhttps://github.com/asterisk/asterisk/tree/24.0.0-pre1x_refsource_MISC