Local Command Execution Vulnerability in Zenitel Connect Software
CVE-2026-95614

9.3CRITICAL

Key Information:

Vendor

Zenitel

Status
Zenitel Connect
Vendor
CVE Published:
13 November 2026

What is CVE-2026-95614?

A configuration vulnerability exists in Zenitel Connect prior to version 1.11.0 where the host configuration watcher applies an insecure rsyslog configuration file to a shared data volume with the hiatus application. This misconfiguration enables local attackers with write permissions on the hiatus container's filesystem to execute arbitrary operating system commands with root privileges on the host system by leveraging a specially crafted rsyslog configuration file.

Affected Version(s)

Zenitel Connect 0 < 1.11.0

References

https://www.zenitel.com/sites/default/files/2026-11/A100K...

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Reported by Kevin Schaller and Dominik Schneider from Amazon Security
.