CVE-2026-95613

Vendor

Zenitel

Product

Zenitel Connect

CVSS v4.0

8.6 AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness

CWE-250, CWE-266, CWE-653

Exposure class

Database

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 30
   CVE NVD 5h ago

   The pREST database REST API in Zenitel Connect firmware before 1.11.0 signs and verifies JWTs with the platform CA private key, which is stored on a…

   The pREST database REST API in Zenitel Connect firmware before 1.11.0 signs and verifies JWTs with the platform CA private key, which is stored on a data volume shared between containers, and sets the PostgreSQL session role from…

   CVSS 8.6 CVE-2026-95613 Zenitel