by Kastro
Paper/Archive/CVE-2026-95614

CVE-2026-95614

Zenitel Zenitel Connect — Zenitel Connect host applies rsyslog configuration written to a volume shared with the hiatus container

CVSS 9.3
critical.is priorityof 100
28
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0No EPSS score.000 × 200.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

The host configuration watcher in Zenitel Connect before 1.11.0 applies a rsyslog configuration file written to a data volume that is shared with the hiatus application container, which allows local attackers with write access to the hiatus container filesystem to execute arbitrary OS commands as root on the host operating system via a crafted rsyslog configuration file.

Affected

ProductAffectedFixed inSource
Zenitel Connect< 1.11.01.11.0CNA

Scores by source

Zenitel (CNA)9.3CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

References

refzenitel.com/sites/default/files/2026-11/A100K12404-Zenitel-Security-Advisory.pdf