Zenitel Alphacom Xe Audio Server
2 CVEs affecting Zenitel Alphacom Xe Audio Server. Latest disclosed: 2026-02-20. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-40845 | High | 8.8 | 2021-09-15 | The web part of Zenitel AlphaCom XE Audio Server through 11.2.3.10, called AlphaWeb XE, does not restrict file upload in the Custom Scripts section at php/inde… |
CVE-2025-59819 | Medium | 6.5 | 2026-02-20 | This vulnerability allows authenticated attackers to read an arbitrary file by changing a filepath parameter into an internal system path. |