ZTE
Vulnerability activity for ZTE: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 7
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 14
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 24
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 1
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 6.5MediumNov 2, 2026ZTE ElasticNet RNIA R18 NGI SQL injectionCVE-2026-118871SQL injection vulnerability classified as an internal threat level.Attackers can steal database information via SQL injection while logged in.
- 5.5MediumOct 10, 2026ZTE Z80 Ultra Privilege escalationCVE-2026-108506ZTE Z80 Ultra's system interfaces do not have robust invocation authentication, with inadequate access control. Third-party apps may call the interfaces through reflection and retrieve relevant information.
- 3.3LowOct 10, 2026ZTE Z80 Ultra Privilege escalationCVE-2026-108505ZTE Z80 Ultra has a local information disclosure vulnerability. Third-party applications can capture data returned by system interfaces to obtain device-related information.
- 5.5MediumOct 10, 2026ZTE Z80 Ultra Privilege escalationCVE-2026-108504ZTE Z80 Ultra has an unauthorized information disclosure vulnerability. The access control for methods within the framework is insufficient. An attacker can exploit this method to read device-related information.
- 3.3LowOct 10, 2026ZTE Z80 Ultra Privilege escalationCVE-2026-108503ZTE Z80 Ultra has an interface permission validation vulnerability. The callable functions provided by the system lack sufficient access control. An attacker can leverage these functions to read relevant information.
- 3.3LowOct 10, 2026ZTE Z80 Ultra Privilege escalationCVE-2026-108502ZTE Z80 Ultra contains an information disclosure vulnerability, through which third-party applications can read relevant information by hooking system APIs.
- 5.7MediumOct 10, 2026ZTE Z80 Ultra Privilege escalationCVE-2026-108501ZTE Z80 Ultra has a system interface permission verification defect. The interface lacks necessary access control, and relevant information can be read by reflectively invoking the interface.
- 5.3MediumSep 30, 2026ZTE U30 Air Privilege escalationCVE-2026-86556There is an information disclosure vulnerability in ZTE U30 Air. Due to improper permission control, attackers can exploit the vulnerability to obtain relevant information.
- 6.2MediumSep 20, 2026ZTE SmartLife Auth bypass / access controlCVE-2026-86555The ZTE SmartLife application has a hardcoded key. The key used to decrypt account server information is stored in plaintext in the code. Once the key is obtained, the server information can be decrypted, thus exposing it.
- 4.3MediumSep 20, 2026ZTE SmartLife Privilege escalationCVE-2026-86554SmartLife app dynamically generates brand‑new SmartLife application authentication parameters within its runtime process. With the obtained SmartLife application authentication parameters, attackers can directly invoke the backend interface /account/verify.serv to determine whether a target email address is registered for a SmartLife account. If the account exists, the real backend account ID can also be retrieved.
- 8.8HighSep 20, 2026ZTE SmartLife Privilege escalationCVE-2026-86553SmartLife app dynamically generates fresh SmartLife application authentication parameters inside its runtime process. Using the acquired SmartLife application authentication parameters, an attacker can directly call the backend interface /account/verify.serv to obtain the real account ID corresponding to a registered email address. By spoofing the application authentication information together with the target account ID, the attacker can reset the password of the target account.
- 5.4MediumSep 20, 2026ZTE SmartLife Privilege escalationCVE-2026-86552SmartLife app dynamically generates brand‑new SmartLife application authentication parameters at runtime. With the acquired SmartLife application authentication credentials, an attacker can directly complete registration using any arbitrary email address via the backend interface /account/person/signup.serv. Email ownership is not verified prior to registration.
- 3.3LowSep 20, 2026ZTE NX741J Information disclosureCVE-2026-86551The Z80Ultra (NX741J) product contains a vulnerability where non-privileged programs can retrieve the Wi-Fi MAC address by querying the read-only field factory_mac_address in the Settings.Secure database.
- 6.5MediumSep 8, 2026ZTE NebulaOS XSSCVE-2026-86550NuBrowser lacks protocol whitelist validation for the S.browser_fallback_url field of intent://, allowing attackers to inject javascript: URLs via 302 redirects. This results in a universal cross‑site scripting (UXSS) vulnerability that enables script execution within the origin of arbitrary websites.
- 5.3MediumMay 27, 2026ZTE ZXUniPOS NDS-LTE CSRFCVE-2026-49001Cross-site request forgery (CSRF) vulnerabilities allow attackers to exploit a user's authenticated session to forge cross-site requests, inducing the execution of unintended operations such as tampering with configuration data.
- 5.7MediumMay 22, 2026Zte mu5250 firmware Information disclosureCVE-2026-44409There is an an information disclosure vulnerability in ZTE MU5250. Due to improper configuration of the access control mechanism, attackers can obtain information without authorization, causing the risk of information disclosure.
- 4.7MediumMay 7, 2026Zte zxcloud irai Memory corruptionCVE-2026-44407A remote denial-of-service vulnerability exists in the ZTE Cloud PC client uSmartview, which may lead to memory corruption and remote denial of service.
- 5.7MediumMay 7, 2026Zte zxcloud irai Privilege escalationCVE-2026-44406ZTE Cloud PC client uSmartView contains a DLL hijacking vulnerability; since uSmartViewServiceAgent.exe runs with SYSTEM privileges, successful hijacking enables local arbitrary code execution, privilege escalation, and memory corruption.contains a DLL hijacking vulnerability; since uSmartViewServiceAgent.exe runs with SYSTEM privileges, successful hijacking enables local arbitrary code execution, privilege escalation, and memory corruption.
- 5.5MediumMay 7, 2026Zte zxcloud irai Privilege escalationCVE-2026-40004There exists an openssl.cnf privilege escalation vulnerability in ZTE Cloud PC client uSmartview. An attacker can execute arbitrary code locally and escalate privileges.
- 5.1MediumMay 7, 2026Zte zx297520v3 firmware Memory corruptionCVE-2026-40003ZTE ZX297520V3 BootROM contains a vulnerability that allows arbitrary memory writes via USB. Attackers can exploit the lack of target address validation in the USB download mode to write data to any location in BootROM runtime memory, thereby overwriting the stack, hijacking the execution flow, bypassing the Secure Boot signature verification mechanism, and achieving unauthorized code execution.
- 5.0MediumApr 17, 2026Zte nubia-in nx809j firmware Privilege escalationCVE-2026-40002Red Magic 11 Pro (NX809J) contains a vulnerability that allows non-privileged applications to trigger sensitive operations. The vulnerability stems from the lack of validation for applications accessing the service interface. Exploiting this vulnerability, an attacker can write files to specific partitions and set writable system properties.
- 7.1HighApr 13, 2026Zte zxesm iemsCVE-2026-40436The ZTE ZXEDM iEMS product has a password reset vulnerability for any user.Because the management of the cloud EMS portal does not properly control access to the user list acquisition function, attackers can read all user list information through the user list interface. Attackers can reset the passwords of obtained user information, causing risks such as unauthorized operations.
- 7.1HighMar 30, 2026Zte zxhn h188a firmware Information disclosureCVE-2026-34472Unauthenticated credential disclosure in the wizard interface in ZTE ZXHN H188A V6.0.10P2_TE and V6.0.10P3N3_TE allows unauthenticated attackers on the local network to retrieve sensitive credentials from the router's web management interface, including the default administrator password, WLAN PSK, and PPPoE credentials. In some observed cases, configuration changes may also be performed without authentication.Exploit-DBDetection
- 4.3MediumJan 9, 2026Zte mf258k pro firmware Privilege escalationCVE-2025-66315There is a configuration defect vulnerability in the version server of ZTE MF258K Pro products. Due to improper directory permission settings, an attacker can execute write permissions in a specific directory.
Top products
- Z80 Ultra5 CVEs in the last year
- SmartLife4 CVEs in the last year
- zxcloud irai3 CVEs in the last year
- ZXUniPOS NDS-LTE1 CVE in the last year
- zxhn h188a firmware1 CVE in the last year
- zxesm iems1 CVE in the last year
- zx297520v3 firmware1 CVE in the last year
- ZTE Z80 Ultra1 CVE in the last year
- U30 Air1 CVE in the last year
- NX741J1 CVE in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.