CERT24CVE-2026-57200 — Asterisk: ARI REST-over-WebSocket read-only bypass allows arbitrary module path load and conditional RCELoading data…
CERT24Threat Observatory
Period

CVE-2026-57200 — Asterisk: ARI REST-over-WebSocket read-only bypass allows arbitrary module path load and conditional RCE

The CIRCL entry describes an Asterisk vulnerability in which an ARI REST-over-WebSocket read-only bypass allows arbitrary module path loading and conditional remote code execution. The source states that multiple vulnerabilities were discovered in Asterisk, some of which may allow remote denial of service, compromise of data integrity, and bypass of the security policy.

← Back to intelligence

CVE-2026-57200 — Asterisk: ARI REST-over-WebSocket read-only bypass allows arbitrary module path load and conditional RCE

The CIRCL entry describes an Asterisk vulnerability in which an ARI REST-over-WebSocket read-only bypass allows arbitrary module path loading and conditional remote code execution. The source states that multiple vulnerabilities were discovered in Asterisk, some of which may allow remote denial of service, compromise of data integrity, and bypass of the security policy.