Zenitel AlphaCom XE Arbitrary File Read Vulnerability

Vulnerability

An arbitrary file read vulnerability has been identified in Zenitel AlphaCom XE. This issue allows authenticated attackers to read files from the system by manipulating a filepath parameter to reference internal system paths. The vulnerability affects AlphaCom XE versions prior to 13.2.3.16.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive files on the server.

Remediation

Users are advised to upgrade to Zenitel AlphaCom XE version 13.2.3.16 and the corresponding board support package.

Added: Feb 20, 2026, 8:21 AM
Updated: Feb 20, 2026, 1:55 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
2.5
exploitability
4.8
remediation
0.0
relevance
3.2
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.