What’s Vulnerable › Products

Zenitel TCIS-3+ vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Zenitel TCIS-3+ version is affected

Latest Zenitel TCIS-3+ vulnerabilities

• CVE-2025-59818 — Authenticated Remote Code Execution via the file name of an uploaded file (CVSS 9.8)
• CVE-2025-64091 — Authenticated Remote Code Execution in the NTP-configuration (CVSS 8.8)
• CVE-2025-64090 — Authenticated Remote Code Execution in device hostname (CVSS 8.8)
• CVE-2025-59817 — Authenticated Remote Code Execution in zForm_auto_config (CVSS 8.4)