CVE-2025-59818Disclosure(zenitel / tcis-3)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

This vulnerability allows authenticated attackers to execute arbitrary commands on the underlying system using the file name of an uploaded file.

zenitel CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.zenitel.com/sites/default/files/2025-12/A100K12333%20Zenitel%20Security%20Advisory.pdf

Other references

Weakness type (CWE)

CWE-77

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

tcis-3
tcis-3_firmware

Threat summary

6 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 6 signals
Disclosure: 6 classified signals
Peaked 1d ago at 5 mentions (2026-02-04); latest day: 1
6 total mentions across 2 days

Affected systems

Vendors

zenitel

Products

tcis-3tcis-3_firmware

1 version affected across 2 products

Deep dive

Activity timeline6 mentions / 2d

Signal classification1 categories

Disclosure

6100.0%

Referenced assets7 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-04	5	Disclosure5
2026-02-09	1	Disclosure1

Full discourse6 posts

The Hacker Wire@TheHackerWire246d
Disclosure
🔴 CVE-2025-59818 - Critical This vulnerability allows authenticated attackers to execute arbitrary commands on the underlying system using the file name of an uploaded file. https://www.thehackerwire.com/vulnerability/CVE-2025-59818/ https://t.co/rWI5zFcMLt
Post summary
The post announces CVE-2025-59818, describing a critical authenticated RCE vulnerability that allows attackers to execute arbitrary commands via the file name of an uploaded file. No PoC, exploit code, active exploitation, patch, or false positive claims are provided.
00010136
113 followersView on X
CVE@CVEnew246d
Disclosure
CVE-2025-59818 This vulnerability allows authenticated attackers to execute arbitrary commands on the underlying system using the file name of an uploaded file. https://www.cve.org/CVERecord?id=CVE-2025-59818
Post summary
The CVE-2025-59818 vulnerability allows authenticated attackers to execute arbitrary commands by manipulating the filename of an uploaded file, but no PoC, exploit, or patch details are provided.
00010301
56.5K followersView on X
CRAC Learning - Tech@cracbot241d
Disclosure
CVE-2025-59818 (CVSS:10.0, CRITICAL) is Awaiting Analysis. This vulnerability allows authenticated attackers to execute arbitrary commands on the underlying system using the file ..https://nvd.nist.gov/vuln/detail/CVE-2025-59818 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE‑2025‑59818, a critical authenticated remote code execution flaw, with basic technical details but no PoC, exploit, or patch information.
0000028
171 followersView on X
CVEFind.com@CveFindCom246d
Disclosure
[CVE-2025-59818: CRITICAL] This vulnerability allows authenticated attackers to execute arbitrary commands on the underlying system using the file name of an uploaded file.#cve,CVE-2025-59818,#cybersecurity https://cvefind.com/CVE-2025-59818
Post summary
The post announces CVE-2025-59818, a critical flaw allowing authenticated attackers to run arbitrary commands through uploaded file names, with no PoC, exploit, or patch details provided.
0000069
583 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds246d
Disclosure
CVE-2025-59818 Authenticated Command Injection Vulnerability in File Upload Mech... https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-59818 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4
Post summary
A new authenticated command injection vulnerability (CVE‑2025‑59818) affecting a file upload mechanism has been disclosed, but no PoC, exploit, or patch information is provided.
0000067
4.0K followersView on X
0day Signal@0dayPublishing246d
Disclosure
🚨 CVE-2025-59818: Authenticated Remote Code Execut... Classic filename parameter injection in Zenitel TCIS-3+ lets authenticated users pivot to RCE - trivial to weaponize wi... https://zerodaysignal.com/vulnerability/CVE-2025-59818 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The post announces CVE-2025-59818, detailing an authenticated filename parameter injection that leads to RCE in Zenitel TCIS-3+, but provides no PoC, exploit code, patches, or evidence of active exploitation.
0000063
132 followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	zenitel	tcis-3	-	-	-
OS	zenitel	tcis-3_firmware	-	-	-

Explore more

Back to dashboard zenitel CVEs tcis-3 vulnerabilities

What researchers are saying

CVE-2025-59818

The Hacker Wire@TheHackerWireDisclosure

The post announces CVE-2025-59818, describing a critical authenticated RCE vulnerability that allows attackers to execute arbitrary commands via the file name of an uploaded file. No PoC, exploit code, active exploitation, patch, or false positive claims are provided.

CVE@CVEnewDisclosure

The CVE-2025-59818 vulnerability allows authenticated attackers to execute arbitrary commands by manipulating the filename of an uploaded file, but no PoC, exploit, or patch details are provided.

CRAC Learning - Tech@cracbotDisclosure

The post announces CVE‑2025‑59818, a critical authenticated remote code execution flaw, with basic technical details but no PoC, exploit, or patch information.

CVEFind.com@CveFindComDisclosure

The post announces CVE-2025-59818, a critical flaw allowing authenticated attackers to run arbitrary commands through uploaded file names, with no PoC, exploit, or patch details provided.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

A new authenticated command injection vulnerability (CVE‑2025‑59818) affecting a file upload mechanism has been disclosed, but no PoC, exploit, or patch information is provided.

0day Signal@0dayPublishingDisclosure

The post announces CVE-2025-59818, detailing an authenticated filename parameter injection that leads to RCE in Zenitel TCIS-3+, but provides no PoC, exploit code, patches, or evidence of active exploitation.