CVE-2026-57185

Asterisk, an open-source telephony toolkit, is vulnerable to a buffer over-read in the PJSIP MWI body parser . An authenticated attacker can crash the service by sending a specially crafted SIP NOTIFY request. To exploit this, the attacker must first pass SIP authentication via username/password ...