Path Traversal in Zenitel Web Interface Allows File Manipulation by Admins
CVE-2026-95378

8.6HIGH

Key Information:

Vendor

Zenitel

Status
Vsff6
Vsff8
Vsff8mp
Vsff8mn
Vendor
CVE Published:
13 November 2026

What is CVE-2026-95378?

A path traversal vulnerability exists in the certificate upload endpoint of the Zenitel web interface within multiple device models. This flaw allows authenticated administrators to upload crafted filename parameters, bypassing both path validation and content checks when certain fields are misconfigured. As a result, arbitrary files can be written as root, paving the way for potential arbitrary code execution, including the overwriting of critical startup scripts or unauthorized SSH key placements.

Affected Version(s)

VSFF6 Linux 10.0.3.0 < 10.1.3.0

VSFF8 Linux 10.0.3.0 < 10.1.3.0

VSFF8MN Linux 10.0.3.0 < 10.1.3.0

References

https://www.zenitel.com/sites/default/files/2026-11/A100K...

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Reported by Kevin Schaller and Dominik Schneider from Amazon Security
.