PatchTheCVEzenitel vulnerabilities
Recent CVEs affecting zenitel products. 5 tracked.
zenitel has 5 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 5. Most recent: 2026-02-04. Highest priority: CVE-2025-64093 (score 54/100).
- CVE-2025-64093 CRITICAL 10.0 UPGRADE UPGRADE Remote Code Execution vulnerability that allows unauthenticated attackers to inject arbitrary commands into th
- CVE-2025-64092 HIGH 7.5 UPGRADE UPGRADE This vulnerability allows unauthenticated attackers to inject an SQL request into GET request parameters and d
- CVE-2025-64091 HIGH 8.6 UPGRADE This vulnerability allows authenticated attackers to execute commands via the NTP-configuration of the device.
- CVE-2025-64090 CRITICAL 10.0 UPGRADE This vulnerability allows authenticated attackers to execute commands via the hostname of the device.
- CVE-2025-59818 CRITICAL 10.0 UPGRADE This vulnerability allows authenticated attackers to execute arbitrary commands on the underlying system using
FAQ
How do I fix zenitel vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is zenitel being exploited right now?
None of the tracked zenitel CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which zenitel CVE should I patch first?
CVE-2025-64093 currently ranks highest (54/100): Remote Code Execution vulnerability that allows unauthenticated attackers to inject arbitrary commands into th.