CVE-2026-108503: low-severity vulnerability in ZTE Z80 Ultra
Unauthorized information acquisition vulnerability in ZTE Z80 Ultra product
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 3.3epss 0.1%
ZTE Z80 Ultra has an interface permission validation vulnerability. The callable functions provided by the system lack sufficient access control. An attacker can leverage these functions to read relevant information.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Affected products
ZTE · Z80 UltraRelated CVEs — ZTE Z80 Ultra
In the same product, most dangerous first.
CVE-2026-108506MEDIUMUnauthorized access vulnerability in ZTE Z80 Ultra productEPSS 0.1%CVE-2026-108502LOWInformation disclosure vulnerability in ZTE Z80 Ultra productEPSS 0.1%CVE-2026-108504MEDIUMUnauthorized information retrieval vulnerability in ZTE Z80 Ultra productEPSS 0.1%CVE-2026-108505LOWInformation disclosure vulnerability in ZTE Z80 Ultra productEPSS 0.1%