CVE-2026-105671: Zenitel Connect login allows username enumeration via verbose error responses

Q: Who can exploit this issue?

A remote attacker can exploit it without authentication or user interaction by sending crafted login requests and comparing the error responses.

Q: Which deployments are affected?

Zenitel Connect versions before 1.11.0 are affected. The issue is in the login flow, so deployments that expose or permit access to that flow are relevant to assess.

Q: What can an attacker gain from successful exploitation?

An attacker can determine which usernames correspond to valid user accounts. The provided information does not indicate direct authentication bypass, data modification, or service disruption.

Published Nov 13, 2026

Updated

The login flow in Zenitel Connect before 1.11.0 returns different error responses depending on whether a submitted username exists, which allows remote attackers to enumerate valid user accounts via crafted login requests.

Affected Software

1 affected component

Zenitel Zenitel Connect<1.11.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1.11.0

Event History

Nov 13, 2026

CVE Published

via MITRE·03:37 PM

Data Sourced

via MITRE·03:37 PM

RemedyDescriptionWeakness

Data Sourced

via NVD·04:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

A remote attacker can exploit it without authentication or user interaction by sending crafted login requests and comparing the error responses.

Which deployments are affected?

Zenitel Connect versions before 1.11.0 are affected. The issue is in the login flow, so deployments that expose or permit access to that flow are relevant to assess.

What can an attacker gain from successful exploitation?

An attacker can determine which usernames correspond to valid user accounts. The provided information does not indicate direct authentication bypass, data modification, or service disruption.

CVE-2026-105671: Zenitel Connect login allows username enumeration via verbose error responses

Affected Software

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

Which deployments are affected?

What can an attacker gain from successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Which deployments are affected?

What can an attacker gain from successful exploitation?