{"id":"CVE-2026-95614","aliases":[],"cve":{"records":[{"id":"CVE-2026-95614","source":"Zenitel","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-22T09:56:14.237Z","published":"2026-11-13T15:46:37.152Z","modified":"2026-11-13T20:03:25.624Z"}],"publishers":[{"name":"Zenitel","role":"CNA","organizationId":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","modified":"2026-11-13T15:46:37.152Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-13T20:03:25.624Z"}],"references":[{"url":"https://www.zenitel.com/sites/default/files/2026-11/A100K12404-Zenitel-Security-Advisory.pdf","tags":[],"source":"Zenitel"}],"weaknesses":[{"id":"CWE-15","description":"CWE-15 External control of system or configuration setting","source":"Zenitel"},{"id":"CWE-653","description":"CWE-653 Improper isolation or compartmentalization","source":"Zenitel"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-13T19:51:38.523906Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Zenitel Connect host applies rsyslog configuration written to a volume shared with the hiatus container","titleSource":"Zenitel","descriptionSource":"Zenitel","description":"The host configuration watcher in Zenitel Connect before 1.11.0 applies a rsyslog configuration file written to a data volume that is shared with the hiatus application container, which allows local attackers with write access to the hiatus container filesystem to execute arbitrary OS commands as root on the host operating system via a crafted rsyslog configuration file.","score":9.3,"severity":"critical","published":"2026-11-13T15:46:37.152Z","modified":"2026-11-13T20:03:25.624Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Zenitel","name":"Zenitel Connect","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"1.11.0","versionType":"semver"}],"defaultStatus":"unaffected","cpes":[],"source":"Zenitel","url":"https://www.cve.org/CVERecord?id=CVE-2026-95614"}],"remediation":[{"text":"Upgrade to version 1.11.0","source":"Zenitel","url":"https://www.cve.org/CVERecord?id=CVE-2026-95614"}],"references":["https://www.zenitel.com/sites/default/files/2026-11/A100K12404-Zenitel-Security-Advisory.pdf"],"sources":[{"name":"CVE","id":"CVE-2026-95614","modified":"2026-11-13T20:03:25.624Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-95614"}],"assessments":[{"source":"Zenitel","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","score":9.3}],"sourceAffected":[],"observedAt":"2026-11-13T20:43:47.813Z","kev":{"status":"not-listed","checkedAt":"2026-11-14T21:45:32.848Z"},"coverage":[{"source":"NVD","status":"refresh-failed","attemptedAt":"2026-11-13T21:40:52.164Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-13T21:30:33.794Z","attemptedAt":"2026-11-13T21:30:33.794Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-13T21:30:33.353Z","attemptedAt":"2026-11-13T21:30:33.353Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-13T21:30:33.517Z","attemptedAt":"2026-11-13T21:30:33.517Z"}],"evidence":[{"source":"ENISA EUVD","id":"EUVD-2026-125527","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-125527","modified":"Nov 13, 2026, 8:03:25 PM","score":9.3,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","checkedAt":"2026-11-13T21:30:33.353Z"},{"source":"GitHub Advisory Database","id":"GHSA-78hc-4g8w-ppr6","url":"https://github.com/advisories/GHSA-78hc-4g8w-ppr6","modified":"2026-11-13T18:32:36Z","checkedAt":"2026-11-13T21:30:33.794Z"}],"aiSummary":{"text":"Zenitel Connect before 1.11.0 applies a rsyslog configuration from a shared volume, allowing local attackers with write access to execute OS commands as root. The weakness is due to external control of system settings and improper isolation. Attackers need access to the hiatus container filesystem.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-13T21:11:08.497Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-95614"}]}}