CVE-2026-23740

CVE-2026-23740 is a critical vulnerability affecting Asterisk, an open-source telephony toolkit, specifically versions prior to 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2. This flaw allows an attacker with write access to a world-writable directory (like /tmp) to execute arbitrary commands or overwrite files as root by manipulating gdb init and output files during coredump operations. With a CVSS score of 7.8 (HIGH), the vulnerability has a low attack complexity and can lead to high confidentiality, integrity, and availability impacts. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.