CVE-2026-95615

Zenitel Connect versions before 1.11.0 are vulnerable to an OS command injection vulnerability within the audio messages API. This flaw exists in the /api/system/audio_messages endpoint due to the improper neutralization of special elements in the filename parameter. A remote authenticated user c...