CVE-2025-64126 — Zenitel TCIV-3+ OS Command Injection
An OS command injection vulnerability exists due to improper input validation. The application accepts a parameter directly from user input without verifying it is a valid IP …
Published: 2025-11-26 · CVSS: 10.0 · CVSS 4.0
An OS command injection vulnerability exists due to improper input validation. The application accepts a parameter directly from user input without verifying it is a valid IP address or filtering potentially malicious characters. This could allow an unauthenticated attacker to inject arbitrary commands.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7