CVE-2026-105623

Vendor

Zenitel

Product

Zenitel Connect

CVSS v4.0

6.9 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness

CWE-540

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 18
   CVE NVD 5h ago

   The web interface in Zenitel Connect before 1.11.0 serves production JavaScript source maps without authentication, which allows remote attackers to…

   The web interface in Zenitel Connect before 1.11.0 serves production JavaScript source maps without authentication, which allows remote attackers to obtain the complete front-end source code, including API usage and internal…

   CVSS 6.9 CVE-2026-105623 Zenitel