What is CVE-2026-49007?

CVE-2026-49007 is a high-severity vulnerability in Zte F689, classified under Use of Hard-coded Credentials. CVSS score: 7.5/10. Published 2026-08-07.

How severe is CVE-2026-49007?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Zte F689

CVE-2026-49007

By accessing unencrypted information in the device firmware, an attacker can obtain the initial login credentials for the device's web interface.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Zte F689 — versions ZXHN F680V9.0.10P6N1,ZXHN F680V9.0.10P4N4,ZXHN F680V9.0.10P4N5,ZXHN F680V9.0.10P4N9,ZXHN F680V9.0.10P4N10,ZXHN F680V9.0.10P1N12,ZXHN F680V9.0.10P1N13

Weakness classification (CWE)

CWE-798 — Use of Hard-coded Credentials

References

psirt@zte.com.cn

Frequently asked questions

What is CVE-2026-49007?: CVE-2026-49007 is a high-severity vulnerability in Zte F689, classified under Use of Hard-coded Credentials. CVSS score: 7.5/10. Published 2026-08-07.
How severe is CVE-2026-49007?: High severity. CVSS v3 base score is 7.5 out of 10.