CVE-2026-57190 | Asterisk up to 23.4.0 cel_pgsql/cel_tds CELGenUserEvent eventtype sql injection

October 27, 2026 Yanac

A vulnerability was found in Asterisk up to 23.4.0. It has been classified as critical. This impacts the function CELGenUserEvent of the component cel_pgsql/cel_tds. This manipulation of the argument eventtype causes sql injection.

The identification of this vulnerability is CVE-2026-57190. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More