CVE-2026-57202

A flaw was found in Asterisk. An authenticated remote attacker with read-only permissions to the Asterisk REST Interface ARI can bypass access controls by invoking the setChannelVar function. This vulnerability allows the attacker to execute restricted write operations, such as modifying arbitrar...