Description
This vulnerability allows authenticated attackers to execute commands via the hostname of the device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Zenitel | TCIS-3+ | <9.2.3.3 | — |
References
- Zenitel Security Advisory vendor-advisory
Critical · 10.0
CVE-2025-64090
EUVD-2026-1758GHSA-p75v-9p9c-j9r7
Authenticated Remote Code Execution in device hostname
Published Jan 9, 2026 · Updated Jan 9, 2026 · Assigned by NCSC-NL