{"id":"CVE-2026-95615","aliases":[],"cve":{"records":[{"id":"CVE-2026-95615","source":"Zenitel","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-22T09:56:15.657Z","published":"2026-11-13T15:45:56.520Z","modified":"2026-11-13T20:03:42.179Z"}],"publishers":[{"name":"Zenitel","role":"CNA","organizationId":"cf9c5165-6fe5-4ec0-b5f1-404f1df30a4e","modified":"2026-11-13T15:45:56.520Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-13T20:03:42.179Z"}],"references":[{"url":"https://www.zenitel.com/sites/default/files/2026-11/A100K12404-Zenitel-Security-Advisory.pdf","tags":[],"source":"Zenitel"}],"weaknesses":[{"id":"CWE-78","description":"CWE-78 Improper neutralization of special elements used in an OS command ('OS command injection')","source":"Zenitel"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-13T19:51:50.060942Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Zenitel Connect OS command injection in hiatus container via unsanitized filename in audio messages API","titleSource":"Zenitel","descriptionSource":"Zenitel","description":"OS command injection vulnerability in audio messages API in Zenitel Connect before 1.11.0 allows remote authenticated users to execute arbitrary OS commands as root in the hiatus application container via filename parameter to the /api/system/audio_messages endpoint.","score":8.7,"severity":"high","published":"2026-11-13T15:45:56.520Z","modified":"2026-11-13T20:03:42.179Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Zenitel","name":"Zenitel Connect","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"1.11.0","versionType":"semver"}],"defaultStatus":"unaffected","cpes":[],"source":"Zenitel","url":"https://www.cve.org/CVERecord?id=CVE-2026-95615"}],"remediation":[{"text":"Upgrade to version 1.11.0","source":"Zenitel","url":"https://www.cve.org/CVERecord?id=CVE-2026-95615"}],"references":["https://www.zenitel.com/sites/default/files/2026-11/A100K12404-Zenitel-Security-Advisory.pdf"],"sources":[{"name":"CVE","id":"CVE-2026-95615","modified":"2026-11-13T20:03:42.179Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-95615"}],"assessments":[{"source":"Zenitel","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","score":8.7}],"sourceAffected":[],"observedAt":"2026-11-13T20:43:50.479Z","kev":{"status":"not-listed","checkedAt":"2026-11-14T23:45:30.863Z"},"coverage":[{"source":"NVD","status":"refresh-failed","attemptedAt":"2026-11-13T21:40:51.718Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-13T21:25:38.010Z","attemptedAt":"2026-11-13T21:25:38.010Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-13T21:25:37.307Z","attemptedAt":"2026-11-13T21:25:37.307Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-13T21:25:36.426Z","attemptedAt":"2026-11-13T21:25:36.426Z"}],"evidence":[{"source":"ENISA EUVD","id":"EUVD-2026-125525","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-125525","modified":"Nov 13, 2026, 8:03:42 PM","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","checkedAt":"2026-11-13T21:25:37.307Z"},{"source":"GitHub Advisory Database","id":"GHSA-7vxq-37v3-3g65","url":"https://github.com/advisories/GHSA-7vxq-37v3-3g65","modified":"2026-11-13T18:32:36Z","checkedAt":"2026-11-13T21:25:38.010Z"}],"aiSummary":null}