CVE-2026-95377

Zenitel EdgeAudioClient devices—specifically VSFF6, VSFF8, VSFF8MP, VSFF8MN, and VSFT models—are vulnerable to an OS command injection in the TFTP provisioning module. The flaw exists in versions before 9.6.3.0 and 10.x before 10.1.3.0 . An unauthenticated adjacent attacker can execute arbitrary ...