CVE-2026-95379

The turbineweb web interface in Zenitel devices (VSFF6, VSFF8, VSFF8MP, VSFF8MN, and VSFT ) is vulnerable to a path traversal flaw in the certificate.deleteCertificate JSON-RPC method (POST /api/rpc). This vulnerability exists in software versions 10.0.3.0 before 10.1.3.0 . An authenticated admin...