CVE-2026-108503

Published: Oct 10, 2026Modified: Oct 13, 2026Deferred

3.3

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Exploitability: 1.8 / Impact: 1.4

Source: psirt@zte.com.cn (Secondary)

Description

ZTE Z80 Ultra has an interface permission validation vulnerability. The callable functions provided by the system lack sufficient access control. An attacker can leverage these functions to read relevant information.

Related CWEs

CWE-276

Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

References (1)

https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/7927166620923281226

Source: psirt@zte.com.cn

Timeline

No history available yet.