CVE-2026-118871mediumCWE-89

CVE-2026-118871: medium-severity vulnerability in ZTE ElasticNet RNIA R18 NGI

SQL Injection vulnerability in ZTE ElasticNet RNIA R18 NGI product

Published

Follow this CVE+ Monitor ElasticNet RNIA R18 NGI

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.3%
SQL injection vulnerability classified as an internal threat level.Attackers can steal database information via SQL injection while logged in.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
ZTE · ElasticNet RNIA R18 NGI