CVE-2025-64090: Zenitel Tcis-3 Firmware

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

This vulnerability allows authenticated attackers to execute commands via the hostname of the device.

Affected products

• Zenitel Tcis-3 Firmware: before 9.2.3.3 (fixed in 9.2.3.3)

Published 2026-01-09. Last modified 2026-06-17.