CVE-2026-57193 — Asterisk: LDAP Filter Injection in res_config_ldap via SIP Username (Unauthenticated Information Disclosure)
Asterisk’s LDAP realtime driver res_config_ldap may allow LDAP filter injection through a SIP username, enabling an unauthenticated attacker to make arbitrary LDAP queries using carefully crafted SIP packets and disclose information.
CERT24