← back
CVE-2025-59819

Authenticated Arbitrary File Read via filepath parameter

CVSS 6.5 MEDIUMEPSS 0.4%CWE-22
This vulnerability allows authenticated attackers to read an arbitrary file by changing a filepath parameter into an internal system path.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
zenitel · alphacom_xe_audio_server

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://wiki.zenitel.com/wiki/AlphaCom_13.02_-_Release_Noteshttps://www.zenitel.com/sites/default/files/2025-12/A100K12333%20Zenitel%20Security%20Advisory.pdf