---
cve: "CVE-2026-57193"
severity: "MEDIUM"
cvss: 6.9
epss: ""
vendor: "asterisk"
kev: false
exploited: false
published: "2026-10-26 20:17:56"
tags: [cve, security, medium]
source: tsecurity.de CVE-Dossier
exported: "2026-10-28T17:09:18+01:00"
---

# CVE-2026-57193

> 6.9 MEDIUM · 🧪 PoC

## Beschreibung

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, the LDAP realtime driver `res_config_ldap` may permit `LDAP filter injection` through a `SIP username`, allowing an unauthenticated attacker to make arbitrary LDAP queries using carefully crafted SIP packets and disclose information. The `res_config_ldap` module must be loaded and configured to access an LDAP server, which is not the default. This issue is fixed in Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3.

## CNA-Record (Kanon, cvelistV5)

- CNA: **GitHub_M**
- State: PUBLISHED
- Stand: 2026-10-26 19:46:01
- CNA-CVSS: **6.9** (`CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N`)

## CVSS-Vektor

```
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Netzwerk | bad |
| AC Komplexität | Gering | bad |
| PR Privilegien | Keine | bad |
| UI Interaktion | Keine | bad |

## Schwachstellen-Klasse

- **CWE-943** — Improper Neutralization of Special Elements in Data Query Logic
  The product generates a query intended to access or manipulate data in a data store such as a database, but it does not neutralize or incorrectly neutralizes special elements that can modify the intended logic of the query.

## Angriffsmuster (CAPEC)

- [CAPEC-676 — NoSQL Injection](https://capec.mitre.org/data/definitions/676.html) _(Severity: High)_

## Patch verfügbar (OSV)

- 1f072600089c8321b8c4141f431742b06cae1c66 (Commit)
- 19ea385cecb1b9403e3d924bcb3d770a04d50b49 (Commit)

## BSI-Hinweise (deutsch)

- [Digium Certified Asterisk: Mehrere Schwachstellen](https://wid.cert-bund.de/portal/wid/sicherheitshinweis/WID-SEC-W-2026-2094) — _BSI-Einstufung: mittel_
  Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Digium Certified Asterisk und Asterisk ausnutzen, um Speicherfehler und Denial-of-Service-Zustände auszulösen, Informationen offenzulegen, Sitzungen zu übernehmen, Sicherheitsmechanismen und Berechtigungen zu umgehen, beliebige SQL- oder LDAP-Abfragen auszuführen sowie unter bestimmten Voraussetzungen beliebigen Programmcode auszuführen.

## Referenzen

- <https://github.com/asterisk/asterisk/security/advisories/GHSA-r6c2-hwc2-j4mp>
- <https://github.com/asterisk/asterisk/commit/04aa482212e43b292817444eb4de35499f4b1568>
- <https://github.com/asterisk/asterisk/commit/14968f2f440ea0dd983caa4f477237a5224904dd>
- <https://github.com/asterisk/asterisk/commit/23c01b6d359c5d85da725beea89e394a6c031c5d>
- <https://github.com/asterisk/asterisk/commit/7e1ae09594a101950398cc6aff2dd2e5ab314884>
- <https://github.com/asterisk/asterisk/commit/8170a6bfa75994e7617a8b9d7fe7a7140b70cbe2>
- <https://github.com/asterisk/asterisk/commit/dd0c768d9e9678e4cb1ed95689a254a61452239b>
- <https://github.com/asterisk/asterisk/commit/ef280572a034cac3994075298facb1999778ee0d>
- <https://github.com/asterisk/asterisk/releases/tag/20.20.1>
- <https://github.com/asterisk/asterisk/releases/tag/21.12.3>
- <https://github.com/asterisk/asterisk/releases/tag/22.10.1>
- <https://github.com/asterisk/asterisk/releases/tag/23.4.1>
- <https://github.com/asterisk/asterisk/releases/tag/certified-20.7-cert11>
- <https://github.com/asterisk/asterisk/releases/tag/certified-22.8-cert3>
- <https://github.com/asterisk/asterisk/tree/24.0.0-pre1>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/sicherheitsluecken/cve-2026-57193/) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI WID (CSAF)_