Denial of Service Vulnerability in Zenitel Connect Product by Zenitel

CVE-2026-105624

What is CVE-2026-105624?

Zenitel Connect prior to version 1.11.0 is vulnerable due to its login flow design, which permits per-account lockouts following successive failed login attempts. This flaw empowers remote attackers to execute denial of service attacks, causing temporary lockouts for targeted user accounts on the web interface. The impacts can be persistent as long as the malicious attempts continue, effectively hindering legitimate user access. It is important to note that this vulnerability does not affect intercom call handling features.

References