Threats tagged 'ghsa-7vxq-37v3-3g65'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.7	CVE-2026-95615audio messages API · OS Command Injection Vulnerability High8.72026-11-13GCVE DatabaseCVE-2026-95615 An OS command injection vulnerability exists in the audio messages API of Zenitel Connect versions before 1.11.0. This flaw allows remote authenticated users to execute arbitrary operating system commands as root within the hiatus application container by exploiting the filename parameter in the /api/system/audio_messages endpoint. Report on CVE-2026-95615 Vulnerability CWE-78 #ghsa-7vxq-37v3-3g65	GCVE Database	2026-11-13

Page 1 of 1