Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

ZTE — Vulnerabilities & Security Advisories 120

Browse all 120 CVE security advisories affecting ZTE. AI-powered Chinese analysis, POCs, and references for each vulnerability.

ZTE Corporation operates as a global telecommunications equipment manufacturer, providing critical infrastructure for mobile networks and enterprise connectivity. With 87 recorded Common Vulnerabilities and Exposures (CVEs), the company’s products have historically been susceptible to remote code execution, cross-site scripting, and privilege escalation flaws. These vulnerabilities often stem from inadequate input validation and weak authentication mechanisms within embedded web interfaces and management protocols. Notable incidents include the discovery of backdoors in certain router models, which raised significant concerns regarding supply chain integrity and potential state-sponsored espionage. While ZTE has implemented enhanced security testing and compliance measures in recent years, the sheer volume of past CVEs highlights persistent challenges in securing complex, distributed network hardware. The company continues to face scrutiny from cybersecurity researchers and government agencies regarding the trustworthiness of its hardware components in sensitive geopolitical contexts.

CVE ID Title CVSS Severity Published
CVE-2026-108506 Unauthorized access vulnerability in ZTE Z80 Ultra product — Z80 Ultra CWE-269 5.5 Medium 2026-10-10
CVE-2026-108505 Information disclosure vulnerability in ZTE Z80 Ultra product — Z80 Ultra CWE-269 3.3 Low 2026-10-10
CVE-2026-108504 Unauthorized information retrieval vulnerability in ZTE Z80 Ultra product — Z80 Ultra CWE-269 5.5 Medium 2026-10-10
CVE-2026-108503 Unauthorized information acquisition vulnerability in ZTE Z80 Ultra product — Z80 Ultra CWE-276 3.3 Low 2026-10-10
CVE-2026-108502 Information disclosure vulnerability in ZTE Z80 Ultra product — Z80 Ultra CWE-269 3.3 Low 2026-10-10
CVE-2026-108501 Unauthorized access vulnerability in ZTE Z80 Ultra product — ZTE Z80 Ultra CWE-269 5.7 Medium 2026-10-10
CVE-2026-86556 An information disclosure vulnerability in ZTE U30 Air product — U30 Air CWE-269 5.3 Medium 2026-09-30
CVE-2026-86555 Hardcoded Key Vulnerability in ZTE SmartLife APP — SmartLife CWE-798 6.2 Medium 2026-09-20
CVE-2026-86554 Email enumeration and account ID leakage vulnerabilities in ZTE SmartLife APP — SmartLife CWE-269 4.3 Medium 2026-09-20
CVE-2026-86553 A password reset vulnerability in ZTE SmartLife APP — SmartLife CWE-269 8.8 High 2026-09-20
CVE-2026-86552 A vulnerability that skips email ownership verification for account registration in ZTE SmartLife APP — SmartLife CWE-269 5.4 Medium 2026-09-20
CVE-2026-86551 Wi-Fi MAC Address Obtainment by Non-privileged Program Vulnerability in ZTE Z80Ultra (NX741J) product — NX741J CWE-668 3.3 Low 2026-09-20
CVE-2026-86550 UXSS vulnerability in ZTE browser products — NebulaOS CWE-79 6.5 Medium 2026-09-08
CVE-2026-49003 Unauthenticated RCE Vulnerability in ZTE ZXDU68 S202 V5.0 Product — ZXDU68 S202 V5.0 CWE-287 9.6 Critical 2026-08-31
CVE-2026-9668 SQL injection vulnerability in ZTE SCP product — SCP CWE-89 6.3 Medium 2026-08-26
CVE-2026-49008 Integrity‑check credential leakage vulnerability in an application function of ZTE F689 product — F689 CWE-321 6.5 Medium 2026-08-07
CVE-2026-49007 Information leakage vulnerability in ZTE F689 product — F689 CWE-798 7.5 High 2026-08-07
CVE-2026-49006 TLS credential leakage vulnerability in ZTE F689 product — F689 CWE-321 5.3 Medium 2026-08-07
CVE-2026-49005 Root password hash exposure vulnerability in ZTE F689 product — F689 CWE-916 2.4 Low 2026-08-07
CVE-2026-8029 SQL Injection Vulnerability in ZTE SmartLife App — SmartLife CWE-89 3.9 Low 2026-08-05
CVE-2026-49004 PostgreSQL Misconfiguration and Command Injection Vulnerability in ZTE NX799J (Red Magic 11 Air) Product — NX799J (Red Magic 11 Air) CWE-89 6.5 Medium 2026-08-05
CVE-2026-40000 Path Traversal Vulnerability in ZTE Blade A75 5G — Blade A75 5G CWE-22 1.8 Low 2026-07-27
CVE-2026-49002 Broken Access Control Vulnerabily in ZTE ZXUniPOS NDS-LTE product — ZXUniPOS NDS-LTE CWE-284 9.1 Critical 2026-05-27
CVE-2026-49001 Cross-Site Request Forgery (CSRF) vulnerability in ZTE ZXUniPOS NDS-LTE product — ZXUniPOS NDS-LTE CWE-352 5.3 Medium 2026-05-27
CVE-2026-49000 Cryptography Implementation Flaw vulnerability in ZTE ZXUniPOS NDS-LTE product — ZXUniPOS NDS-LTE CWE-310 7.0 High 2026-05-27
CVE-2026-48999 Stored Cross-Site Scripting (XSS) vulnerability in ZTE ZXUniPOS NDS-LTE product — ZXUniPOS NDS-LTE CWE-79 5.7 Medium 2026-05-27
CVE-2026-44410 Function Abusement Vulnerability in ZTE ZXUniPOS NDS-LTE — ZXUniPOS NDS-LTE CWE-1240 3.8 Low 2026-05-26
CVE-2026-44409 Information disclosure vulnerability in ZTE MU5250 — MU5250 CWE-200 5.7 Medium 2026-05-22
CVE-2026-44408 Unauthorized access vulnerability in ZTE MU5250 — MU5250 CWE-200 6.3 Medium 2026-05-19
CVE-2026-44407 Remote Denial of Service Vulnerability Exists in ZTE Cloud PC Client uSmartview — ZXCLOUD iRAI CWE-134 4.7 Medium 2026-05-07

This page lists every published CVE security advisory associated with ZTE. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.