🔐 CVE Alert

CVE-2026-57190

UNKNOWN 0.0

Asterisk: SQL Injection in cel_pgsql and cel_tds via CELGenUserEvent eventtype Field

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, the `PostgreSQL` and `TDS/MSSQL` Channel Event Log backends `cel_pgsql` and `cel_tds` may permit arbitrary SQL execution when untrusted data is set in the CEL `eventtype` column by the `CELGenUserEvent` dialplan application. The `cel_pgsql` or `cel_tds` backend must be loaded and configured, and the administrator must call `CELGenUserEvent` in the dialplan without ensuring that only valid data is passed to the application. This issue is fixed in Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3.

CWE CWE-89
Vendor asterisk
Product asterisk
Published Oct 27, 2026
Stay Ahead of the Next One

Get instant alerts for asterisk asterisk

Be the first to know when new unknown vulnerabilities affecting asterisk asterisk are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

asterisk / asterisk
< 20.20.1 >= 21.0.0-pre1, < 21.12.3 >= 22.0.0-pre1, < 22.10.1 >= 23.0.0-pre1, < 23.4.1
asterisk / certified-asterisk
< 20.7-cert11 >= 22.8-cert1-pre1, < 22.8-cert3

References

NVD ↗ CVE.org ↗ EPSS Data ↗
github.com: https://github.com/asterisk/asterisk/security/advisories/GHSA-ph27-3m5q-mj5m github.com: https://github.com/asterisk/asterisk/commit/046a8b0b50623d80926c1adc2eca1c9c17e258ed github.com: https://github.com/asterisk/asterisk/commit/0a86e45e8cde7630276f8363de45f71d1635d2f4 github.com: https://github.com/asterisk/asterisk/commit/88c65757b56c716b5a175f35941be22e038b256f github.com: https://github.com/asterisk/asterisk/commit/8bf7746d01221d6d2bcfcd46ba7a1cff066a1a8b github.com: https://github.com/asterisk/asterisk/commit/8cb6dfd41debb2259ec3a33ccfa78f1d902e4c22 github.com: https://github.com/asterisk/asterisk/commit/a04bee3992c28e1681457370e46f30494b7c6619 github.com: https://github.com/asterisk/asterisk/commit/ff21d90e61d199db9b963c671d125a1e917d41ac github.com: https://github.com/asterisk/asterisk/releases/tag/20.20.1 github.com: https://github.com/asterisk/asterisk/releases/tag/21.12.3 github.com: https://github.com/asterisk/asterisk/releases/tag/22.10.1 github.com: https://github.com/asterisk/asterisk/releases/tag/23.4.1 github.com: https://github.com/asterisk/asterisk/releases/tag/certified-20.7-cert11 github.com: https://github.com/asterisk/asterisk/releases/tag/certified-22.8-cert3 github.com: https://github.com/asterisk/asterisk/tree/24.0.0-pre1