Vulnerabilidades en ZTE

114 resultados
Análisis Vexday

Com 99 CVEs catalogadas e nenhuma entrada no catálogo CISA KEV, a taxa de exploração ativa da ZTE está abaixo da média geral do catálogo, o que sugere pressão ofensiva atualmente menor do que em outros vendors. Ainda assim, o EPSS de 0,8965 registrado para CVE-2018-7358 indica probabilidade elevada de exploração para essa vulnerabilidade específica, exigindo atenção mesmo sem confirmação formal de exploração ativa. O tipo de falha mais frequente é CWE-269 (gerenciamento inadequado de privilégios), padrão que tende a favorecer escalação de privilégios e movimentação lateral em ambientes comprometidos. As 14 CVEs surgidas nos últimos 90 dias e a presença de 6 falhas críticas com 3 PoCs públicas reforçam a necessidade de monitoramento contínuo do portfólio de vulnerabilidades desse vendor.

CVE-2026-49007HIGHInformation leakage vulnerability in ZTE F689 productEPSS 0.3%CVE-2023-25651MEDIUMSQL Injection Vulnerability in Some ZTE Mobile Internet ProductsEPSS 0.3%CVE-2023-41781MEDIUMXSS Vulnerability in ZTE MF258 ProductsEPSS 0.3%CVE-2025-46582HIGHPrivate Key Disclosure Vulnerability in ZTE ZXMP M721 ProductEPSS 0.3%CVE-2025-46579HIGHZTE GoldenDB Database product has a DDE injection vulnerabilityEPSS 0.3%CVE-2025-26705MEDIUMImproper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1EPSS 0.3%CVE-2024-22066HIGHThere is a privilege escalation vulnerability in ZTE ZXR10 ZSR V2 intelligent multi service router . An authenticated attacker could use theEPSS 0.3%CVE-2026-40003MEDIUMUSB-based arbitrary memory write vulnerability in ZTE ZX297520V3 soc BootROMEPSS 0.3%CVE-2026-40000LOWPath Traversal Vulnerability in ZTE Blade A75 5GEPSS 0.3%CVE-2026-49002CRITICALBroken Access Control Vulnerabily in ZTE ZXUniPOS NDS-LTE productEPSS 0.3%CVE-2025-26707MEDIUMImproper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1EPSS 0.3%CVE-2025-66314HIGHImproper Privilege Management vulnerability in ZTE ElasticNet UME R32 on Linux allows Accessing Functionality Not Properly Constrained by ACEPSS 0.3%CVE-2025-46576MEDIUMZTE GoldenDB Database product has a privilege escalation vulnerabilityEPSS 0.3%CVE-2026-44407MEDIUMRemote Denial of Service Vulnerability Exists in ZTE Cloud PC Client uSmartviewEPSS 0.3%CVE-2025-26709MEDIUMUnauthorized Access Vulnerability in ZTE F50EPSS 0.3%CVE-2025-26711MEDIUMThere is an unauthorized access vulnerability in ZTE T5400. Due to improper permission control of the Web module interface, an unauthorized EPSS 0.3%CVE-2026-86550MEDIUMUXSS vulnerability in ZTE browser productsEPSS 0.3%CVE-2026-86552MEDIUMA vulnerability that skips email ownership verification for account registration in ZTE SmartLife APPEPSS 0.3%CVE-2024-22069HIGHPermission and Access Control Vulnerability in ZXV10 XT802/ET301EPSS 0.3%CVE-2025-66315MEDIUMZTE MF258K Pro Version Server has a Configuration Defect VulnerabilityEPSS 0.3%