Vulnerabilidades em ZTE

122 resultados
Análise Vexday

Com 99 CVEs catalogadas e nenhuma entrada no catálogo CISA KEV, a taxa de exploração ativa da ZTE está abaixo da média geral do catálogo, o que sugere pressão ofensiva atualmente menor do que em outros vendors. Ainda assim, o EPSS de 0,8965 registrado para CVE-2018-7358 indica probabilidade elevada de exploração para essa vulnerabilidade específica, exigindo atenção mesmo sem confirmação formal de exploração ativa. O tipo de falha mais frequente é CWE-269 (gerenciamento inadequado de privilégios), padrão que tende a favorecer escalação de privilégios e movimentação lateral em ambientes comprometidos. As 14 CVEs surgidas nos últimos 90 dias e a presença de 6 falhas críticas com 3 PoCs públicas reforçam a necessidade de monitoramento contínuo do portfólio de vulnerabilidades desse vendor.

CVE-2025-46578MEDIUMZTE GoldenDB Database product has SQL injection vulnerabilities in multiple interfacesEPSS 0.4%CVE-2025-46577MEDIUMZTE GoldenDB Database product has an SQL injection vulnerabilityEPSS 0.4%CVE-2026-86552MEDIUMA vulnerability that skips email ownership verification for account registration in ZTE SmartLife APPEPSS 0.4%CVE-2023-25651MEDIUMSQL Injection Vulnerability in Some ZTE Mobile Internet ProductsEPSS 0.3%CVE-2025-46582HIGHPrivate Key Disclosure Vulnerability in ZTE ZXMP M721 ProductEPSS 0.3%CVE-2026-86554MEDIUMEmail enumeration and account ID leakage vulnerabilities in ZTE SmartLife APPEPSS 0.3%CVE-2023-41781MEDIUMXSS Vulnerability in ZTE MF258 ProductsEPSS 0.3%CVE-2025-46579HIGHZTE GoldenDB Database product has a DDE injection vulnerabilityEPSS 0.3%CVE-2026-118871MEDIUMSQL Injection vulnerability in ZTE ElasticNet RNIA R18 NGI productEPSS 0.3%CVE-2025-26705MEDIUMImproper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1EPSS 0.3%CVE-2026-49008MEDIUMIntegrity‑check credential leakage vulnerability in an application function of ZTE F689 productEPSS 0.3%CVE-2024-22066HIGHThere is a privilege escalation vulnerability in ZTE ZXR10 ZSR V2 intelligent multi service router . An authenticated attacker could use theEPSS 0.3%CVE-2025-66314HIGHImproper Privilege Management vulnerability in ZTE ElasticNet UME R32 on Linux allows Accessing Functionality Not Properly Constrained by ACEPSS 0.3%CVE-2026-40003MEDIUMUSB-based arbitrary memory write vulnerability in ZTE ZX297520V3 soc BootROMEPSS 0.3%CVE-2026-49002CRITICALBroken Access Control Vulnerabily in ZTE ZXUniPOS NDS-LTE productEPSS 0.3%CVE-2025-26709MEDIUMUnauthorized Access Vulnerability in ZTE F50EPSS 0.3%CVE-2025-46576MEDIUMZTE GoldenDB Database product has a privilege escalation vulnerabilityEPSS 0.3%CVE-2025-26707MEDIUMImproper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1EPSS 0.3%CVE-2026-44407MEDIUMRemote Denial of Service Vulnerability Exists in ZTE Cloud PC Client uSmartviewEPSS 0.3%CVE-2025-26711MEDIUMThere is an unauthorized access vulnerability in ZTE T5400. Due to improper permission control of the Web module interface, an unauthorized EPSS 0.3%