Zenitel
Vulnerability activity for Zenitel: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 5
- Critical (CVSS 9+)
- 3
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 10.0CriticalFeb 4, 2026Zenitel tcis-3 firmware Code / command injectionCVE-2025-59818This vulnerability allows authenticated attackers to execute arbitrary commands on the underlying system using the file name of an uploaded file.
- 10.0CriticalJan 9, 2026Zenitel icx500 firmware Code / command injectionCVE-2025-64093Remote Code Execution vulnerability that allows unauthenticated attackers to inject arbitrary commands into the hostname of the device.
- 7.5HighJan 9, 2026Zenitel icx500 firmware SQL injectionCVE-2025-64092This vulnerability allows unauthenticated attackers to inject an SQL request into GET request parameters and directly query the underlying database.
- 8.6HighJan 9, 2026Zenitel tcis-3 firmware Code / command injectionCVE-2025-64091This vulnerability allows authenticated attackers to execute commands via the NTP-configuration of the device.
- 10.0CriticalJan 9, 2026Zenitel tcis-3 firmware Code / command injectionCVE-2025-64090This vulnerability allows authenticated attackers to execute commands via the hostname of the device.
Top products
- tcis-3 firmware3 CVEs in the last year, 2 critical
- icx500 firmware2 CVEs in the last year, 1 critical
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.