← Back

CVE-2026-40002

nvd nist
Published: Apr 17, 2026Modified: Jul 8, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Exploitability: 2.0 / Impact: 6.0
Source: NVD

Description

Red Magic 11 Pro (NX809J) contains a vulnerability that allows non-privileged applications to trigger sensitive operations. The vulnerability stems from the lack of validation for applications accessing the service interface. Exploiting this vulnerability, an attacker can write files to specific partitions and set writable system properties.

Affected (1)

Zte
1 product
Nubia In Nx809j Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Nubia In Nx809j Firmware
Before GEN_NEEA_NX809JV1.0.0B16MR1
Running on/withPlatform Versions
Zte
Nubia In Nx809j
All versions

Related CWEs

CWE-269
Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (1)

Source: psirt@zte.com.cn
Vendor Advisory

Timeline

No history available yet.