VDB

CVE-2026-25994

CVE-2026-25994 PUBLISHED CVSS 9.300000190734863 CRITICAL

Asterisk ist eine komplette Open Source Multiprotokoll Telefonanlage (PBX) auf Softwarebasis.

EPSS 2.25% · 82.8th percentile

Risk Scores

CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
2.25%
82.8th percentile

Affected Products

VendorProductVersions
Open SourceOpen Source Asterisk <22.9.0
Open SourceOpen Source Asterisk <21.12.2
Open SourceOpen Source Asterisk <22.8-cert2
Open SourceOpen Source Asterisk <20.19.0
DebianDebian Linux
Open SourceOpen Source Asterisk <20.7-cert10
Open SourceOpen Source Asterisk <23.3.0

Timeline

  • Feb 9, 2026 CVE ID Reserved
  • Feb 11, 2026 CVE Published
  • Feb 12, 2026 EPSS Score
  • Feb 12, 2026 CVE Updated
  • Feb 15, 2026 EPSS Score
  • Feb 17, 2026 EPSS Score
  • Feb 20, 2026 EPSS Score
  • Feb 22, 2026 EPSS Score
  • Feb 25, 2026 EPSS Score
  • Feb 28, 2026 EPSS Score
  • Mar 2, 2026 EPSS Score
  • Mar 5, 2026 EPSS Score

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›