Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

zenitel vulnerabilities

15 published CVEs name zenitel among the affected products.

Published CVEs
15
Last 12 months
11
Critical
7
Known exploited
0

Critical 7High 7Medium 1Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20259
  2. 20266

Newest CVEs

  • CVE-2025-59819

    Authenticated Arbitrary File Read via filepath parameter

    zenitel · alphacom_xe_audio_server

    Medium6.5
  • CVE-2025-59818

    Authenticated Remote Code Execution via the file name of an uploaded file

    Zenitel · TCIS-3+

    Critical10.0
  • CVE-2025-64093

    Unauthenticated Remote Code Execution via the device hostname

    Zenitel · ICX500

    Critical10.0
  • CVE-2025-64092

    Unauthenticated SQL injection via GET request parameters

    Zenitel · ICX500

    High7.5
  • CVE-2025-64091

    Authenticated Remote Code Execution in the NTP-configuration

    Zenitel · TCIS-3+

    High8.6
  • CVE-2025-64090

    Authenticated Remote Code Execution in device hostname

    Zenitel · TCIS-3+

    Critical10.0
  • CVE-2025-64130

    Zenitel TCIV-3+ Cross-site Scripting

    Zenitel · TCIV-3+

    Critical9.3
  • CVE-2025-64129

    Zenitel TCIV-3+ Out-of-bounds Write

    Zenitel · TCIV-3+

    High7.0
  • CVE-2025-64128

    Zenitel TCIV-3+ OS Command Injection

    Zenitel · TCIV-3+

    Critical10.0
  • CVE-2025-64127

    Zenitel TCIV-3+ OS Command Injection

    Zenitel · TCIV-3+

    Critical10.0