← All advisories

Critical severity10.0NVD Advisory· Published Feb 4, 2026· Updated Jun 17, 2026

CVE-2025-59818

CVE-2025-59818

Description

This vulnerability allows authenticated attackers to execute arbitrary commands on the underlying system using the file name of an uploaded file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7

Zenitel/Tcis 3 Firmware
cpe:2.3:o:zenitel:tcis-3_firmware:*:*:*:*:*:*:*:*
Range: <9.2.3.3
Zenitel/Turbinellm-create
Zenitel/VSF-Display Seriesllm-create
Zenitel/VSF-Fortitude6llm-create
Zenitel/ZIPSllm-create
Zenitel/A100K12333llm-fuzzy
Zenitel/TCIV-3+cpe-rescue
Range: <9.2.3.3

Patches

Vulnerability mechanics

References

6

www.zenitel.com/sites/default/files/2025-12/A100K12333%20Zenitel%20Security%20Advisory.pdfnvdVendor Advisory
wiki.zenitel.com/wiki/Turbine_9.3_-_Release_notesnvdRelease Notes
wiki.zenitel.com/wiki/VSF-Display_Series_9.3_Release_NotesnvdRelease Notes
wiki.zenitel.com/wiki/VSF-Fortitude6_9.3_Release_NotesnvdRelease Notes
wiki.zenitel.com/wiki/VSF-Fortitude8_9.3_Release_NotesnvdRelease Notes
wiki.zenitel.com/wiki/ZIPS_9.3_-_Release_notesnvdRelease Notes

News mentions

0

No linked articles in our index yet.