Skip to content
OpenAdvisories

Product · Zenitel

VSFF6

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.6
    CVE-2026-95378

    Path traversal in Zenitel turbineweb certificate upload allows arbitrary file write as root

    Path traversal in the certificate upload endpoint (/api/certificate/upload) of the turbineweb web interface in Zenitel VSFF6, VSFF8, VSFF8MP, VSFF8MN, and VSFT devices with software versions from 10.0.3.0 before 10.1.3.0 allows authenticated administrators to…

    Zenitel VSFF8 VSFF8MN VSFF6
  • High 7.0
    CVE-2026-95379

    Path traversal in Zenitel turbineweb certificate delete RPC allows arbitrary file deletion as root

    Path traversal in the certificate.deleteCertificate JSON-RPC method (POST /api/rpc) of the turbineweb web interface in Zenitel VSFF6, VSFF8, VSFF8MP, VSFF8MN, and VSFT devices with software versions from 10.0.3.0 before 10.1.3.0 allows authenticated administr…

    Zenitel VSFF6 VSFF8MP VSFT