CVE-2025-59818: Authenticated Remote Code Execution via the file name of an uploaded file
Published Feb 4, 2026
·Updated
This vulnerability allows authenticated attackers to execute arbitrary commands on the underlying system using the file name of an uploaded file.
Affected Software
2 affected components
All of the following
Zenitel Tcis-3 Firmware<9.2.3.3
Zenitel Tcis-3
Event History
Feb 4, 2026
CVE Published
via MITRE·10:26 AM
Data Sourced
via MITRE·10:26 AM
DescriptionSeverity
Data Sourced
via NVD·11:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-59818?
CVE-2025-59818 has been classified as a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2025-59818?
To fix CVE-2025-59818, users should upgrade to a patched version of Zenitel TCIS-3 firmware that addresses this vulnerability.
3
Who is affected by CVE-2025-59818?
CVE-2025-59818 affects users of Zenitel TCIS-3 firmware versions up to 9.2.3.3.
4
What type of attack does CVE-2025-59818 involve?
CVE-2025-59818 involves authenticated remote code execution via manipulated file names during file uploads.
5
What can attackers do with CVE-2025-59818?
Attackers exploiting CVE-2025-59818 can execute arbitrary commands on the underlying system, posing a significant security risk.