https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:38:26.160269+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0123 certfr-2026-avi-0123 — De multiples vulnérabilités ont été découvertes dans Asterisk. Certaines d'entre elles permettent à un attaquant de pro… 2026-10-02T13:38:26.163917+00:00 certfr-2026-avi-0123 https://cve.radiocsirt.org/vuln/euvd-2026-267590 EUVD-2026-267590 2026-10-02T13:38:26.163951+00:00 EUVD-2026-267590 https://cve.radiocsirt.org/vuln/fkie_cve-2026-23740 fkie_cve-2026-23740 2026-10-02T13:38:26.163967+00:00

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, when ast_coredumper writes its gdb init and output files to a directory that is world-writable (for example /tmp), an attacker with write permission(which is all users on a linux system) to that directory can cause root to execute arbitrary commands or overwrite arbitrary files by controlling the gdb init file and output paths. This issue has been patched in versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-23740 UBUNTU-CVE-2026-23740 2026-10-02T13:38:26.163995+00:00

Affected: Ubuntu:Pro:16.04:LTS: asterisk, Ubuntu:18.04:LTS: asterisk, Ubuntu:20.04:LTS: asterisk, Ubuntu:22.04:LTS: asterisk, Ubuntu:24.04:LTS: asterisk, Ubuntu:25.10: asterisk, Ubuntu:26.04:LTS: asterisk

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, when ast_coredumper writes its gdb init and output files to a directory that is world-writable (for example /tmp), an attacker with write permission(which is all users on a linux system) to that directory can cause root to execute arbitrary commands or overwrite arbitrary files by controlling the gdb init file and output paths. This issue has been patched in versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0327 WID-SEC-W-2026-0327 — Asterisk: Mehrere Schwachstellen 2026-10-02T13:38:26.164029+00:00

Ein Angreifer kann mehrere Schwachstellen in Asterisk ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, beliebigen Code mit Root-Rechten auszuführen, erweiterte Privilegien zu erlangen, Daten zu manipulieren oder vertrauliche Informationen offenzulegen.