What is CVE-2026-34472?

CVE-2026-34472 is a high-severity vulnerability in Zte Zxhn_h188a, classified under Information Disclosure. CVSS score: 7.1/10. Published 2026-03-30.

How severe is CVE-2026-34472?

High severity. CVSS v3 base score is 7.1 out of 10.

Is CVE-2026-34472 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Auth bypass in Zte Zxhn_h188a

CVE-2026-34472

Unauthenticated credential disclosure in the wizard interface in ZTE ZXHN H188A V6.0.10P2_TE and V6.0.10P3N3_TE allows unauthenticated attackers on the local network to retrieve sensitive credentials from the router's web management interf…

Vulnerability class: Information Disclosure

EPSS: 0.008 (74.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N.

Affected products

Zte Zxhn_h188a
Zte Zxhn_h188a_firmware — versions 6.0.10p2_te, 6.0.10p3n3_te
N/a — versions n/a

Weakness classification (CWE)

Public proof-of-concept exploits

minanagehsalalma/cve-2026-34472-auth-bypass-zte-h188a-router

References

Frequently asked questions

What is CVE-2026-34472?: CVE-2026-34472 is a high-severity vulnerability in Zte Zxhn_h188a, classified under Information Disclosure. CVSS score: 7.1/10. Published 2026-03-30.
How severe is CVE-2026-34472?: High severity. CVSS v3 base score is 7.1 out of 10.
Is CVE-2026-34472 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.