Product by Zenitel
Zenitel Connect
8 known vulnerabilities in Zenitel Connect (Zenitel), 0 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-95614 | Zenitel Connect: External Control of System or Configuration Setting | — | |
| High | CVE-2026-95615 | Zenitel Connect: OS Command Injection | — | |
| High | CVE-2026-95613 | Zenitel Connect pREST API adopts arbitrary PostgreSQL role from unvalidated JWT sub claim | — | |
| Medium | CVE-2026-105623 | Zenitel Connect web interface serves production JavaScript source maps without authentication | — | |
| Medium | CVE-2026-105624 | Zenitel Connect login allows account-lockout denial of service | — | |
| Medium | CVE-2026-105671 | Zenitel Connect login allows username enumeration via verbose error responses | — | |
| Medium | CVE-2026-105622 | Zenitel Connect missing lockout and rate limiting on the WAMP-CRA authentication channel | — | |
| Medium | CVE-2026-105625 | Zenitel Connect web interface loads integration iframe without sandboxing or origin restriction | — |