CVE-2025-64127 — Zenitel TCIV-3+ OS Command Injection
An OS command injection vulnerability exists due to insufficient sanitization of user-supplied input. The application accepts parameters that are later incorporated into OS co…
Published: 2025-11-26 · CVSS: 10.0 · CVSS 4.0
An OS command injection vulnerability exists due to insufficient sanitization of user-supplied input. The application accepts parameters that are later incorporated into OS commands without adequate validation. This could allow an unauthenticated attacker to execute arbitrary commands remotely.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7