Telenia Software vulnerabilities

Products

• TVox 3

Latest Telenia Software CVEs

Newest publication first

1. CVE-2026-67609 Telenia TVox 26.5.3 Privilege Escalation via Insecure sudoers Configuration

   Published 2026-08-03

   High·CVSS 8.5 EPSS 0.20%

   Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain a privilege escalation vulnerability that allows attackers with access to the apache account to execute arbitrary commands as root by exploiting an insecure sudoers configuration in...

2. CVE-2026-67608 Telenia TVox 26.5.3 OS Command Injection via action_audio.php

   Published 2026-08-03

   High·CVSS 8.6 EPSS 2.4%

   Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain an OS command injection vulnerability in action_audio.php that allows authenticated attackers to execute arbitrary operating system commands by passing an unsanitized pid parameter...

3. CVE-2026-64827 Telenia TVox 26.5.3 Authentication Bypass via set_env.php

   Published 2026-08-03

   Critical·CVSS 9.3 EPSS 0.83%

   Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, contain an authentication bypass vulnerability in set_env.php where the redirectToLoginAdminIRequestHaveAccessToken() function derives the current page name from PHP_SELF and skips authenti...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.