CVE-2026-108504

Published: Oct 10, 2026Modified: Oct 13, 2026Deferred

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: psirt@zte.com.cn (Secondary)

Description

ZTE Z80 Ultra has an unauthorized information disclosure vulnerability. The access control for methods within the framework is insufficient. An attacker can exploit this method to read device-related information.

Related CWEs

CWE-269

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (1)

https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/7927166620923281234

Source: psirt@zte.com.cn

Timeline

No history available yet.