CVE-2026-49000: high-severity vulnerability in ZTE ZXUniPOS NDS-LTE
Cryptography Implementation Flaw vulnerability in ZTE ZXUniPOS NDS-LTE product
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7epss 0.1%
An insecure password scheme refers to vulnerabilities arising from improper selection of encryption algorithms, inadequate key management, or flawed code implementation, which may lead to data leakage or tampering, such as hard-coded keys or the use of weak encryption algorithms.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L
Affected products
ZTE · ZXUniPOS NDS-LTERelated CVEs — ZTE ZXUniPOS NDS-LTE
In the same product, most dangerous first.
CVE-2026-49002CRITICALBroken Access Control Vulnerabily in ZTE ZXUniPOS NDS-LTE productEPSS 0.3%CVE-2026-48999MEDIUMStored Cross-Site Scripting (XSS) vulnerability in ZTE ZXUniPOS NDS-LTE productEPSS 0.2%CVE-2026-44410LOWFunction Abusement Vulnerability in ZTE ZXUniPOS NDS-LTEEPSS 0.1%CVE-2026-49001MEDIUMCross-Site Request Forgery (CSRF) vulnerability in ZTE ZXUniPOS NDS-LTE productEPSS 0.1%