CVE-2026-105625
Zenitel Connect web interface loads integration iframe without sandboxing or origin restriction
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The web interface in Zenitel Connect before 1.11.0 loads an integration iframe without sandboxing or origin restrictions, which allows remote attackers to present phishing content to authenticated users via a crafted frame source.
| CWE | CWE-1021 |
| Vendor | zenitel |
| Product | zenitel connect |
| Published | Nov 13, 2026 |
Stay Ahead of the Next One
Get instant alerts for zenitel zenitel connect
Be the first to know when new unknown vulnerabilities affecting zenitel zenitel connect are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Zenitel / Zenitel Connect
0 < 1.11.0
References
Credits
🔍 Reported by ZeroSubnet