CVE-2026-105671

Vendor

Zenitel

Product

Zenitel Connect

CVSS v4.0

6.9 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness

CWE-204

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 18
   CVE NVD 5h ago

   The login flow in Zenitel Connect before 1.11.0 returns different error responses depending on whether a submitted username exists, which allows…

   The login flow in Zenitel Connect before 1.11.0 returns different error responses depending on whether a submitted username exists, which allows remote attackers to enumerate valid user accounts via crafted login requests.

   CVSS 6.9 CVE-2026-105671 Zenitel