CVE-2026-44410

Published: May 26, 2026Modified: Jul 24, 2026Deferred

3.8

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L

Exploitability: 1.2 / Impact: 2.5

Source: psirt@zte.com.cn (Secondary)

Description

This vulnerability stems from a business logic flaw.Attackers can exploit legitimate application functions in unintended and abnormal ways, deviating from the designer's expectations, to carry out malicious attacks.

Related CWEs

CWE-1240

Use of a Cryptographic Primitive with a Risky Implementation

To fulfill the need for a cryptographic primitive, the product implements a cryptographic algorithm using a non-standard, unproven, or disallowed/non-compliant cryptographic implementation.

References (1)

https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/3711746568357343383

Source: psirt@zte.com.cn

Timeline

No history available yet.