https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 14 Nov 2026 01:33:23 +0000 https://db.gcve.eu/vuln/cve-2026-95378 <p><strong>Affected:</strong> Zenitel VSFF6, Zenitel VSFF8, Zenitel VSFF8MP, Zenitel VSFF8MN, Zenitel VSFT</p> <p>Path traversal in the certificate upload endpoint (/api/certificate/upload) of the turbineweb web interface in Zenitel VSFF6, VSFF8, VSFF8MP, VSFF8MN, and VSFT devices with software versions from 10.0.3.0 before 10.1.3.0 allows authenticated administrators to write arbitrary files as root via a crafted filename parameter in a multipart upload request when the type field is set to any value other than https_certificate. In that case, both path validation and certificate content validation are skipped.</p> <p>This can be escalated to arbitrary code execution as root, for example by overwriting startup scripts or planting SSH keys.</p> <p><strong>Affected:</strong> Zenitel VSFF6, Zenitel VSFF8, Zenitel VSFF8MP, Zenitel VSFF8MN, Zenitel VSFT</p> <p>Path traversal in the certificate upload endpoint (/api/certificate/upload) of the turbineweb web interface in Zenitel VSFF6, VSFF8, VSFF8MP, VSFF8MN, and VSFT devices with software versions from 10.0.3.0 before 10.1.3.0 allows authenticated administrators to write arbitrary files as root via a crafted filename parameter in a multipart upload request when the type field is set to any value other than https_certificate. In that case, both path validation and certificate content validation are skipped.</p> <p>This can be escalated to arbitrary code execution as root, for example by overwriting startup scripts or planting SSH keys.</p> https://db.gcve.eu/vuln/cve-2026-95378