CVE-2026-95377 | Zenitel EdgeAudioClient prior 9.6.3.0/10.1.3.0 TFTP Provisioning os command injection

November 13, 2026 Yanac

A vulnerability, which was classified as very critical, has been found in Zenitel EdgeAudioClient. This vulnerability affects unknown code of the component TFTP Provisioning Module. The manipulation of the argument DHCP option 66/config_update_tftp_server/sw_update_tftp_server leads to os command injection.

This vulnerability is referenced as CVE-2026-95377. Remote exploitation of the attack is possible. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More