Records18All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9
Exploited now
Zenitel records in CISA KEVNo Zenitel vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 50
This vulnerability allows authenticated attackers to execute arbitrary commands on the underlying system using the file name of an uploaded file.
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.00568 · Published 2026-02-04 · Fixed in 9.2.3.3 CWE-77
Priority MEDIUM 49
This vulnerability allows authenticated attackers to execute commands via the hostname of the device.
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.00421 · Published 2026-01-09 · Fixed in 9.2.3.3 CWE-77
Priority MEDIUM 44
This vulnerability allows authenticated attackers to execute commands via the NTP-configuration of the device.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00371 · Published 2026-01-09 · Fixed in 9.2.3.3 CWE-78
Open these records in search →