Zte
124 CVEs across 371 Zte products. Browse Zte vulnerabilities, severities, and proof-of-concept exploits.
Zte products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-49008 | Medium | 6.5 | 2026-08-07 | By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to the integrity verification of a specific application… |
CVE-2026-49007 | High | 7.5 | 2026-08-07 | By accessing unencrypted information in the device firmware, an attacker can obtain the initial login credentials for the device's web interface. |
CVE-2026-49006 | Medium | 5.3 | 2026-08-07 | By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to TLS transmission. |
CVE-2026-49005 | Low | 2.4 | 2026-08-07 | The root password hash of the device can be obtained through unencrypted information in the firmware. |
CVE-2026-8029 | Low | 3.9 | 2026-08-05 | The ZTE Smart Life app contains an SQL injection vulnerability that allows attackers to execute UNION SELECT statements to query sensitive data in the feedback… |
CVE-2026-49004 | Medium | 6.5 | 2026-08-05 | The built-in PostgreSQL service on the mobile device suffers from misconfiguration flaws and command injection vulnerabilities. This service listens on a speci… |
CVE-2026-40000 | Low | 1.8 | 2026-07-27 | The Activity zte.com.cn.filer/zte.com.cn.filer.FilePreViewActivity within ZTE File Manager is designed to preview compressed files. Third-party applications ca… |
CVE-2026-49002 | Critical | 9.1 | 2026-05-27 | Access control failure means that an application does not effectively check user access permissions, so that unauthorized users can access system data beyond t… |
CVE-2026-49001 | Medium | 5.3 | 2026-05-27 | Cross-site request forgery (CSRF) vulnerabilities allow attackers to exploit a user's authenticated session to forge cross-site requests, inducing the executio… |
CVE-2026-49000 | High | 7.0 | 2026-05-27 | An insecure password scheme refers to vulnerabilities arising from improper selection of encryption algorithms, inadequate key management, or flawed code imple… |
CVE-2026-48999 | Medium | 5.7 | 2026-05-27 | Attackers carefully craft malicious scripts, such as JavaScript, and inject them into target systems; when other users access pages containing such malicious c… |
CVE-2026-44410 | Low | 3.8 | 2026-05-26 | This vulnerability stems from a business logic flaw.Attackers can exploit legitimate application functions in unintended and abnormal ways, deviating from the… |
CVE-2026-44409 | Medium | 5.7 | 2026-05-22 | There is an an information disclosure vulnerability in ZTE MU5250. Due to improper configuration of the access control mechanism, attackers can obtain informat… |
CVE-2026-44408 | Medium | 6.3 | 2026-05-19 | There is an unauthorized access vulnerability in ZTE MU5250. Due to improper permission control of the Web interface, an unauthorized attacker can modify conf… |
CVE-2026-44407 | Medium | 4.7 | 2026-05-07 | A remote denial-of-service vulnerability exists in the ZTE Cloud PC client uSmartview, which may lead to memory corruption and remote denial of service. |
CVE-2026-44406 | Medium | 5.7 | 2026-05-07 | ZTE Cloud PC client uSmartView contains a DLL hijacking vulnerability; since uSmartViewServiceAgent.exe runs with SYSTEM privileges, successful hijacking enabl… |
CVE-2026-40004 | Medium | 5.5 | 2026-05-07 | There exists an openssl.cnf privilege escalation vulnerability in ZTE Cloud PC client uSmartview. An attacker can execute arbitrary code locally and escalate p… |
CVE-2026-40003 | Medium | 5.1 | 2026-05-07 | ZTE ZX297520V3 BootROM contains a vulnerability that allows arbitrary memory writes via USB. Attackers can exploit the lack of target address validation in the… |
CVE-2026-40001 | Medium | 5.2 | 2026-05-06 | There is a local privilege escalation vulnerability in the ZTE PROCESS Guard service of the cloud computer client, which may allow local arbitrary code executi… |
CVE-2026-40002 | Medium | 5.0 | 2026-04-17 | Red Magic 11 Pro (NX809J) contains a vulnerability that allows non-privileged applications to trigger sensitive operations. The vulnerability stems from the la… |
CVE-2026-40436 | High | 7.1 | 2026-04-13 | The ZTE ZXEDM iEMS product has a password reset vulnerability for any user.Because the management of the cloud EMS portal does not properly control access to t… |
CVE-2026-34472 | High | 7.1 | 2026-03-30 | Unauthenticated credential disclosure in the wizard interface in ZTE ZXHN H188A V6.0.10P2_TE and V6.0.10P3N3_TE allows unauthenticated attackers on the local n… |
CVE-2025-66315 | Medium | 4.3 | 2026-01-09 | There is a configuration defect vulnerability in the version server of ZTE MF258K Pro products. Due to improper directory permission settings, an attacker can… |
CVE-2025-66314 | High | 7.5 | 2025-11-27 | Improper Privilege Management vulnerability in ZTE ElasticNet UME R32 on Linux allows Accessing Functionality Not Properly Constrained by ACLs.This issue affec… |
CVE-2025-46583 | Medium | 5.3 | 2025-10-27 | There is a Denial of Service（DoS）vulnerability in the ZTE MC889A Pro product. Due to insufficient validation of the input parameters of the Short Message Servi… |
CVE-2025-46582 | High | 7.7 | 2025-10-27 | A private key disclosure vulnerability exists in ZTE's ZXMP M721 product. A low-privileged user can bypass authorization checks to view the device's communicat… |
CVE-2025-46581 | Critical | 9.8 | 2025-10-14 | ZTE's ZXCDN product is affected by a Struts remote code execution (RCE) vulnerability. An unauthenticated attacker can remotely execute commands with non-root… |
CVE-2025-26711 | Medium | 5.7 | 2025-09-16 | There is an unauthorized access vulnerability in ZTE T5400. Due to improper permission control of the Web module interface, an unauthorized attacker can obtain… |
CVE-2025-26710 | Low | 3.5 | 2025-09-16 | There is an an information disclosure vulnerability in ZTE T5400. Due to improper configuration of the access control mechanism, attackers can obtain informati… |
CVE-2025-26709 | Medium | 5.7 | 2025-08-15 | There is an unauthorized access vulnerability in ZTE F50. Due to improper permission control of the Web module interface, an unauthorized attacker can obtain s… |
CVE-2025-46580 | High | 7.7 | 2025-04-27 | There is a code-related vulnerability in the GoldenDB database product. Attackers can access system tables to disrupt the normal operation of business SQL. |
CVE-2025-46579 | High | 8.4 | 2025-04-27 | There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and when users download an… |
CVE-2025-46578 | Medium | 6.5 | 2025-04-27 | There are SQL injection vulnerabilities in multiple interfaces of the GoldenDB database product. Attackers can exploit these interfaces to inject commands and… |
CVE-2025-46577 | Medium | 6.5 | 2025-04-27 | There is a SQL injection vulnerability in the GoldenDB database product. Attackers can inject commands to extract database information. |
CVE-2025-46576 | Medium | 5.4 | 2025-04-27 | There is a Permission Management and Access Control vulnerability in the GoldenDB database product. Attackers can manipulate requests to bypass privilege restr… |
CVE-2025-46575 | Medium | 4.9 | 2025-04-27 | There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages to obtain the system's sensitive inform… |
CVE-2025-46574 | Medium | 4.1 | 2025-04-27 | There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages to obtain the system's sensitive inform… |
CVE-2025-26706 | Medium | 5.4 | 2025-03-11 | Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1.03.07. |
CVE-2025-26705 | Medium | 5.3 | 2025-03-11 | Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1.03.05. |
CVE-2025-26704 | Medium | 6.4 | 2025-03-11 | Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1.03.05. |
CVE-2025-26703 | Medium | 4.3 | 2025-03-11 | Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1.03.04. |
CVE-2025-26702 | Medium | 4.9 | 2025-03-11 | Improper Input Validation vulnerability in ZTE GoldenDB allows Input Data Manipulation.This issue affects GoldenDB: from 6.1.03 through 6.1.03.04. |
CVE-2025-26707 | Medium | 5.3 | 2025-03-11 | Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1.03.05. |
CVE-2025-26708 | Medium | 4.2 | 2025-03-07 | There is a configuration defect vulnerability in ZTELink 5.4.9 for iOS. This vulnerability is caused by a flaw in the WiFi parameter configuration of the ZTELi… |
CVE-2024-22063 | High | 7.6 | 2024-12-30 | The ZENIC ONE R58 products by ZTE Corporation have a command injection vulnerability. An authenticated attacker can exploit this vulnerability to tamper with m… |
CVE-2024-22067 | Medium | 6.8 | 2024-11-18 | ZTE NH8091 product has an improper permission control vulnerability. Due to improper permission control of the Web module interface, an authenticated attacker… |
CVE-2024-22066 | High | 7.5 | 2024-10-29 | There is a privilege escalation vulnerability in ZTE ZXR10 ZSR V2 intelligent multi service router . An authenticated attacker could use the vulnerability to o… |
CVE-2024-22065 | Medium | 6.8 | 2024-10-29 | There is a command injection vulnerability in ZTE MF258 Pro product. Due to insufficient validation of Ping Diagnosis interface parameter, an authenticated att… |
CVE-2024-10119 | Critical | 9.8 | 2024-10-18 | The wireless router WRTM326 from SECOM does not properly validate a specific parameter. An unauthenticated remote attacker could execute arbitrary system comma… |
CVE-2024-22068 | Medium | 6.0 | 2024-10-10 | Improper Privilege Management vulnerability in ZTE ZXR10 1800-2S series ,ZXR10 2800-4,ZXR10 3800-8,ZXR10 160 series on 64 bit allows Functionality Bypass.This… |
CVE-2022-39068 | Medium | 4.5 | 2024-09-18 | There is a buffer overflow vulnerability in ZTE MF296R. Due to insufficient validation of the SMS parameter length, an authenticated attacker could use the vul… |
CVE-2024-22069 | High | 7.1 | 2024-08-08 | There is a permission and access control vulnerability of ZTE's ZXV10 XT802/ET301 product.Attackers with common permissions can log in the terminal web and cha… |
CVE-2024-22062 | Medium | 6.3 | 2024-07-09 | There is a permissions and access control vulnerability in ZXCLOUD IRAI.An attacker can elevate non-administrator permissions to administrator permissions by m… |
CVE-2023-25646 | High | 7.1 | 2024-06-20 | There is an unauthorized access vulnerability in ZTE H388X. If H388X is caused by brute-force serial port cracking,attackers with common user permissions can u… |
CVE-2024-22064 | High | 8.3 | 2024-05-14 | ZTE ZXUN-ePDG product, which serves as the network node of the VoWifi system, under by default configuration, uses a set of non-unique cryptographic keys durin… |
CVE-2023-41781 | Medium | 5.7 | 2024-01-10 | There is a Cross-site scripting (XSS) vulnerability in ZTE MF258. Due to insufficient input validation of SMS interface parameter, an XSS attack will be trig… |
CVE-2023-41782 | Low | 3.9 | 2024-01-05 | There is a DLL hijacking vulnerability in ZTE ZXCLOUD iRAI, an attacker could place a fake DLL file in a specific directory and successfully exploit this vuln… |
CVE-2023-41784 | Medium | 6.6 | 2024-01-04 | Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro |
CVE-2023-41783 | Medium | 4.3 | 2024-01-03 | There is a command injection vulnerability of ZTE's ZXCLOUD iRAI. Due to the program failed to adequately validate the user's input, an attacker could exploi… |
CVE-2023-41780 | Medium | 6.4 | 2024-01-03 | There is an unsafe DLL loading vulnerability in ZTE ZXCLOUD iRAI. Due to the program failed to adequately validate the user's input, an attacker could exploi… |
CVE-2023-41779 | Medium | 4.4 | 2024-01-03 | There is an illegal memory access vulnerability of ZTE's ZXCLOUD iRAI product.When the vulnerability is exploited by an attacker with the common user permissio… |
CVE-2023-41776 | Medium | 6.7 | 2024-01-03 | There is a local privilege escalation vulnerability of ZTE's ZXCLOUD iRAI.Attackers with regular user privileges can create a fake process, and to escalate loc… |
CVE-2023-25644 | Medium | 6.5 | 2023-12-14 | There is a denial of service vulnerability in some ZTE mobile internet products. Due to insufficient validation of Web interface parameter, an attacker could… |
CVE-2023-25643 | High | 8.4 | 2023-12-14 | There is a command injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation of multiple network parameters, an aut… |
CVE-2023-25642 | Medium | 5.9 | 2023-12-14 | There is a buffer overflow vulnerability in some ZTE mobile internet producsts. Due to insufficient validation of tcp port parameter, an authenticated attacke… |
CVE-2023-25651 | Medium | 4.3 | 2023-12-14 | There is a SQL injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation of SMS interface parameter, an authenticated… |
CVE-2023-25650 | Medium | 6.5 | 2023-12-14 | There is an arbitrary file download vulnerability in ZXCLOUD iRAI. Since the backend does not escape special strings or restrict paths, an attacker with user… |
CVE-2023-25648 | Medium | 6.5 | 2023-12-14 | There is a weak folder permission vulnerability in ZTE's ZXCLOUD iRAI product. Due to weak folder permission, an attacker with ordinary user privileges could… |
CVE-2023-25649 | Medium | 6.8 | 2023-08-25 | There is a command injection vulnerability in a mobile internet product of ZTE. Due to insufficient validation of SET_DEVICE_LED interface parameter, an authe… |
CVE-2023-25647 | Medium | 4.7 | 2023-08-17 | There is a permission and access control vulnerability in some ZTE mobile phones. Due to improper access control, applications in mobile phone could monitor… |
CVE-2023-25645 | High | 7.7 | 2023-06-16 | There is a permission and access control vulnerability in some ZTE AndroidTV STBs. Due to improper permission settings, non-privileged application can perform… |
CVE-2022-39075 | High | 7.1 | 2023-05-30 | There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the phone, it could delete some system file… |
CVE-2022-39074 | Low | 3.3 | 2023-05-30 | There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the phone, it could start a non-public inte… |
CVE-2022-39071 | High | 7.1 | 2023-05-30 | There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the phone, it could overwrite some system c… |
CVE-2022-39073 | Critical | 9.8 | 2023-01-06 | There is a command injection vulnerability in ZTE MF286R, Due to insufficient validation of the input parameters, an attacker could use the vulnerability to ex… |
CVE-2022-39072 | Medium | 5.4 | 2023-01-06 | There is a SQL injection vulnerability in Some ZTE Mobile Internet products. Due to insufficient validation of the input parameters of the SNTP interface, an a… |
CVE-2022-45957 | High | 7.5 | 2022-12-12 | ZTE ZXHN-H108NS router with firmware version H108NSV1.0.7u_ZRD_GR2_A68 is vulnerable to remote stack buffer overflow. |
CVE-2022-23143 | Medium | 6.5 | 2022-12-05 | ZTE OTCP product is impacted by a permission and access control vulnerability. Due to improper permission settings, an attacker with high permissions could use… |
CVE-2022-39070 | Critical | 9.8 | 2022-11-22 | There is an access control vulnerability in some ZTE PON OLT products. Due to improper access control settings, remote attackers could use the vulnerability to… |
CVE-2022-39067 | Medium | 6.5 | 2022-11-22 | There is a buffer overflow vulnerability in ZTE MF286R. Due to lack of input validation on parameters of the wifi interface, an authenticated attacker could us… |
CVE-2022-39066 | High | 8.8 | 2022-11-22 | There is a SQL injection vulnerability in ZTE MF286R. Due to insufficient validation of the input parameters of the phonebook interface, an authenticated attac… |
CVE-2022-39069 | Medium | 5.3 | 2022-11-08 | There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack by building malici… |
CVE-2022-23144 | Critical | 9.1 | 2022-09-23 | There is a broken access control vulnerability in ZTE ZXvSTB product. Due to improper permission control, attackers could use this vulnerability to delete the… |
CVE-2022-23142 | Medium | 5.3 | 2022-07-18 | ZXEN CG200 has a DoS vulnerability. An attacker could construct and send a large number of HTTP GET requests in a short time, which can make the product manage… |
CVE-2022-23141 | High | 7.5 | 2022-07-15 | ZXMP M721 has an information leak vulnerability. Since the serial port authentication on the ZBOOT interface is not effective although it is enabled, an attack… |
CVE-2022-23138 | High | 7.5 | 2022-06-09 | ZTE's MF297D product has cryptographic issues vulnerability. Due to the use of weak random values, the security of the device is reduced, and it may face the r… |
CVE-2022-23139 | High | 8.8 | 2022-05-12 | ZTE's ZXMP M721 product has a permission and access control vulnerability. Since the folder permission viewed by sftp is 666, which is inconsistent with the ac… |
CVE-2022-23137 | Medium | 6.1 | 2022-05-11 | ZTE's ZXCDN product has a reflective XSS vulnerability. The attacker could modify the parameters in the content clearing request url, and when a user clicks th… |
CVE-2022-23136 | Medium | 5.4 | 2022-03-30 | There is a stored XSS vulnerability in ZTE home gateway product. An attacker could modify the gateway name by inserting special characters and trigger an XSS a… |
CVE-2022-23135 | Medium | 6.5 | 2022-02-24 | There is a directory traversal vulnerability in some home gateway products of ZTE. Due to the lack of verification of user modified destination path, an attack… |
CVE-2021-21751 | High | 8.1 | 2021-12-27 | ZTE BigVideo analysis product has an input verification vulnerability. Due to the inconsistency between the front and back verifications when configuring the l… |
CVE-2021-21750 | High | 7.8 | 2021-12-27 | ZTE BigVideo Analysis product has a privilege escalation vulnerability. Due to improper management of the timed task modification privilege, an attacker with o… |
CVE-2021-21749 | Critical | 9.8 | 2021-10-20 | ZTE MF971R product has two stack-based buffer overflow vulnerabilities. An attacker could exploit the vulnerabilities to execute arbitrary code. |
CVE-2021-21748 | Critical | 9.8 | 2021-10-20 | ZTE MF971R product has two stack-based buffer overflow vulnerabilities. An attacker could exploit the vulnerabilities to execute arbitrary code. |
CVE-2021-21745 | Medium | 4.3 | 2021-10-20 | ZTE MF971R product has a Referer authentication bypass vulnerability. Without CSRF verification, an attackercould use this vulnerability to perform illegal aut… |
CVE-2021-21744 | High | 7.5 | 2021-10-20 | ZTE MF971R product has a configuration file control vulnerability. An attacker could use this vulnerability to modify the configuration parameters of the devic… |
CVE-2021-21743 | Medium | 4.3 | 2021-10-20 | ZTE MF971R product has a CRLF injection vulnerability. An attacker could exploit the vulnerability to modify the HTTP response header information through a spe… |
CVE-2021-21747 | Medium | 6.1 | 2021-10-20 | ZTE MF971R product has reflective XSS vulnerability. An attacker could use the vulnerability to obtain cookie information. |
CVE-2021-21746 | Medium | 6.1 | 2021-10-20 | ZTE MF971R product has reflective XSS vulnerability. An attacker could use the vulnerability to obtain cookie information. |
CVE-2021-21742 | Medium | 5.5 | 2021-09-25 | There is an information leak vulnerability in the message service app of a ZTE mobile phone. Due to improper parameter settings, attackers could use this vulne… |