CVE-2026-57193

The Asterisk telephony toolkit is vulnerable to LDAP filter injection in the res_config_ldap realtime driver. An unauthenticated attacker can exploit this by sending carefully crafted SIP packets containing a malicious SIP username . This allows the attacker to execute arbitrary LDAP queries and ...