← All credits

Reported by ZeroSubnet

5 vulnerability records and advisories credit this contributor.

CVE-2026-105622

Zenitel Connect missing lockout and rate limiting on the WAMP-CRA authentication channel

CVE-2026-105624

Zenitel Connect login allows account-lockout denial of service

CVE-2026-105623

Zenitel Connect web interface serves production JavaScript source maps without authentication

CVE-2026-105671

Zenitel Connect login allows username enumeration via verbose error responses

CVE-2026-105625

Zenitel Connect web interface loads integration iframe without sandboxing or origin restriction