CVE-2026-95615 | Zenitel Connect up to 1.10.x Audio Messages API audio_messages filename os command injection

November 13, 2026 Yanac

A vulnerability was found in Zenitel Connect up to 1.10.x. It has been classified as very critical. This issue affects some unknown processing of the file /api/system/audio_messages of the component Audio Messages API. This manipulation of the argument filename causes os command injection.

This vulnerability is registered as CVE-2026-95615. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More