CyberSecBulletin

Telenia Software vulnerabilities

We track 3 vulnerabilities in Telenia Software products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 3, 2026.

3vulnerabilities
1critical
2high
0exploited
8.3average CVSS score

Latest Telenia Software vulnerabilities

  • 7.8 High severity

    TVox: Execution with Unnecessary Privileges

    CVE-2026-67609Telenia Software

    Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain a privilege escalation vulnerability that allows attackers with access to the apache account to execute arbitrary commands as root by exploiting an insecure sudo

  • 7.2 High severity

    TVox: Improper Neutralization of Special Elements used in an OS Command

    CVE-2026-67608Telenia SoftwareEPSS 2.43%

    Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain an OS command injection vulnerability in action_audio.php that allows authenticated attackers to execute arbitrary operating system commands by passing an unsani

  • 9.8 Critical severity

    TVox: Reliance on Untrusted Inputs in a Security Decision

    CVE-2026-64827Telenia Software

    Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain an authentication bypass vulnerability in set_env.php where the redirectToLoginAdminIRequestHaveAccessToken() function derives the current page name from PHP_SEL