Vulnerabilidades en ZTE

114 resultados
Análisis Vexday

Com 99 CVEs catalogadas e nenhuma entrada no catálogo CISA KEV, a taxa de exploração ativa da ZTE está abaixo da média geral do catálogo, o que sugere pressão ofensiva atualmente menor do que em outros vendors. Ainda assim, o EPSS de 0,8965 registrado para CVE-2018-7358 indica probabilidade elevada de exploração para essa vulnerabilidade específica, exigindo atenção mesmo sem confirmação formal de exploração ativa. O tipo de falha mais frequente é CWE-269 (gerenciamento inadequado de privilégios), padrão que tende a favorecer escalação de privilégios e movimentação lateral em ambientes comprometidos. As 14 CVEs surgidas nos últimos 90 dias e a presença de 6 falhas críticas com 3 PoCs públicas reforçam a necessidade de monitoramento contínuo do portfólio de vulnerabilidades desse vendor.

CVE-2026-44408MEDIUMUnauthorized access vulnerability in ZTE MU5250EPSS 0.3%CVE-2025-26703MEDIUMImproper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1EPSS 0.2%CVE-2023-25647MEDIUMPermission and Access Control Vulnerability in Some ZTE Mobile PhonesEPSS 0.2%CVE-2023-25646HIGHPermission and Access Control Vulnerability in ZTE H388XEPSS 0.2%CVE-2024-22068MEDIUMWeak Password Vulnerability in ZTE ZSR V2 Intelligent Multi Service RouterEPSS 0.2%CVE-2025-26706MEDIUMImproper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1EPSS 0.2%CVE-2025-26710LOWThere is an an information disclosure vulnerability in ZTE T5400. Due to improper configuration of the access control mechanism, attackers cEPSS 0.2%CVE-2025-26704MEDIUMImproper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1EPSS 0.2%CVE-2025-46574MEDIUMZTE GoldenDB Database product has an input validation vulnerabilityEPSS 0.2%CVE-2023-41780MEDIUMUnsafe DLL Loading Vulnerability in ZTE ZXCLOUD iRAIEPSS 0.2%CVE-2026-44409MEDIUMInformation disclosure vulnerability in ZTE MU5250EPSS 0.2%CVE-2023-25648MEDIUMWeak Folder Permission Vulnerability in ZTE ZXCLOUD iRAIEPSS 0.2%CVE-2023-41782LOWDLL Hijacking Vulnerability in ZTE ZXCLOUD iRAIEPSS 0.2%CVE-2026-86554MEDIUMEmail enumeration and account ID leakage vulnerabilities in ZTE SmartLife APPEPSS 0.2%CVE-2026-40436HIGHZTE ZXEDM iEMS product has a password reset vulnerabilityEPSS 0.2%CVE-2026-86555MEDIUMHardcoded Key Vulnerability in ZTE SmartLife APPEPSS 0.2%CVE-2026-49008MEDIUMIntegrity‑check credential leakage vulnerability in an application function of ZTE F689 productEPSS 0.2%CVE-2026-86551LOWWi-Fi MAC Address Obtainment by Non-privileged Program Vulnerability in ZTE Z80Ultra (NX741J) productEPSS 0.2%CVE-2026-48999MEDIUMStored Cross-Site Scripting (XSS) vulnerability in ZTE ZXUniPOS NDS-LTE productEPSS 0.2%CVE-2023-41784MEDIUMPermissions and Access Control Vulnerability in ZTE Red Magic 8 ProEPSS 0.2%