CVE-2025-59818 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

This vulnerability allows authenticated attackers to execute arbitrary commands on the underlying system using the file name of an uploaded file.
Critical CVSS: 10.0

CVE-2025-59818

This vulnerability allows authenticated attackers to execute arbitrary commands on the underlying system using the file name of an uploaded file.
Vendor
Zenitel
Product
Tcis-3 Firmware
CWE
CWE-77
Yayın Tarihi
2026-02-04 11:16:01
Güncelleme
2026-02-11 20:20:07
Source Identifier
cert@ncsc.nl
KEV Date Added
-

Kategoriler

CWE-77 Tcis-3 Firmware CRITICAL Zenitel 2026

Referanslar

https://wiki.zenitel.com/wiki/Turbine_9.3_-_Release_notes https://wiki.zenitel.com/wiki/VSF-Display_Series_9.3_Release_Notes https://wiki.zenitel.com/wiki/VSF-Fortitude6_9.3_Release_Notes https://wiki.zenitel.com/wiki/VSF-Fortitude8_9.3_Release_Notes https://wiki.zenitel.com/wiki/ZIPS_9.3_-_Release_notes https://www.zenitel.com/sites/default/files/2025-12/A100K12333%20Zenitel%20Security%20Advisory.pdf