Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

ZTE — Vulnerabilities & Security Advisories 120

Browse all 120 CVE security advisories affecting ZTE. AI-powered Chinese analysis, POCs, and references for each vulnerability.

ZTE Corporation operates as a global telecommunications equipment manufacturer, providing critical infrastructure for mobile networks and enterprise connectivity. With 87 recorded Common Vulnerabilities and Exposures (CVEs), the company’s products have historically been susceptible to remote code execution, cross-site scripting, and privilege escalation flaws. These vulnerabilities often stem from inadequate input validation and weak authentication mechanisms within embedded web interfaces and management protocols. Notable incidents include the discovery of backdoors in certain router models, which raised significant concerns regarding supply chain integrity and potential state-sponsored espionage. While ZTE has implemented enhanced security testing and compliance measures in recent years, the sheer volume of past CVEs highlights persistent challenges in securing complex, distributed network hardware. The company continues to face scrutiny from cybersecurity researchers and government agencies regarding the trustworthiness of its hardware components in sensitive geopolitical contexts.

CVE ID Title CVSS Severity Published
CVE-2026-44406 DLL Hijacking Vulnerability in ZTE Cloud PC Client uSmartview — ZXCLOUD iRAI CWE-427 5.7 Medium 2026-05-07
CVE-2026-40004 openssl.cnf Privilege Escalation Vulnerability in ZTE Cloud PC Client uSmartview — ZXCLOUD iRAI CWE-427 5.5 Medium 2026-05-07
CVE-2026-40003 USB-based arbitrary memory write vulnerability in ZTE ZX297520V3 soc BootROM — ZX297520V3 BootROM CWE-787 5.1 Medium 2026-05-07
CVE-2026-40001 Local privilege escalation vulnerability in ZTE PROCESS Guard service of the cloud computer client — ZTE PROCESS Guard service CWE-269 5.2 Medium 2026-05-06
CVE-2026-40002 ZTE Red Magic 11 Pro (NX809J) contains a vulnerability that allows non-privileged applications to trigger sensitive operations. — Red Magic 11 Pro (NX809J) CWE-269 5.0 Medium 2026-04-17
CVE-2026-40436 ZTE ZXEDM iEMS product has a password reset vulnerability — ZXEDM iEMS 7.1 High 2026-04-13
CVE-2025-66315 ZTE MF258K Pro Version Server has a Configuration Defect Vulnerability — MF258K CWE-269 4.3 Medium 2026-01-09
CVE-2025-66314 ZTE ElasticNet UME R32 安全漏洞 — ElasticNet UME R32 CWE-269 7.5 High 2025-11-27
CVE-2025-46583 DOS Vulnerability in ZTE MC889A Pro product — MC889A Pro CWE-116 5.3 Medium 2025-10-27
CVE-2025-46582 Private Key Disclosure Vulnerability in ZTE ZXMP M721 Product — ZXMP M721 CWE-321 7.7 High 2025-10-27
CVE-2025-46581 ZTE ZXCDN product has a Struts RCE Vulnerability — ZXCDN CWE-94 9.8 Critical 2025-10-14
CVE-2025-26711 ZTE T5400 安全漏洞 — T5400 CWE-200 5.7 Medium 2025-09-16
CVE-2025-26710 ZTE T5400 安全漏洞 — T5400 CWE-200 3.5 Low 2025-09-16
CVE-2025-26709 Unauthorized Access Vulnerability in ZTE F50 — F50 CWE-200 5.7 Medium 2025-08-15
CVE-2025-46580 ZTE GoldenDB Database product has a code-related vulnerability — GoldenDB CWE-400 7.7 High 2025-04-27
CVE-2025-46579 ZTE GoldenDB Database product has a DDE injection vulnerability — GoldenDB CWE-94 8.4 High 2025-04-27
CVE-2025-46578 ZTE GoldenDB Database product has SQL injection vulnerabilities in multiple interfaces — GoldenDB CWE-89 6.5 Medium 2025-04-27
CVE-2025-46577 ZTE GoldenDB Database product has an SQL injection vulnerability — GoldenDB CWE-89 6.5 Medium 2025-04-27
CVE-2025-46576 ZTE GoldenDB Database product has a privilege escalation vulnerability — GoldenDB CWE-269 5.4 Medium 2025-04-27
CVE-2025-46575 ZTE GoldenDB Database product has an information disclosure vulnerability — GoldenDB CWE-209 4.9 Medium 2025-04-27
CVE-2025-46574 ZTE GoldenDB Database product has an input validation vulnerability — GoldenDB CWE-20 4.1 Medium 2025-04-27
CVE-2025-26702 ZTE GoldenDB 输入验证错误漏洞 — GoldenDB CWE-20 4.9 Medium 2025-03-11
CVE-2025-26703 ZTE GoldenDB 安全漏洞 — GoldenDB CWE-269 4.3 Medium 2025-03-11
CVE-2025-26704 ZTE GoldenDB 安全漏洞 — GoldenDB CWE-269 6.4 Medium 2025-03-11
CVE-2025-26705 ZTE GoldenDB 安全漏洞 — GoldenDB CWE-269 5.3 Medium 2025-03-11
CVE-2025-26706 ZTE GoldenDB 安全漏洞 — GoldenDB CWE-269 5.4 Medium 2025-03-11
CVE-2025-26707 ZTE GoldenDB 安全漏洞 — GoldenDB CWE-269 5.3 Medium 2025-03-11
CVE-2025-26708 ZTELink has a configuration defect vulnerability — ZTE Link CWE-327 4.2 Medium 2025-03-07
CVE-2024-22063 ZTE ZENIC ONE R58 product has a CSV injection vulnerability — ZENIC ONE R58 CWE-1236 7.6 High 2024-12-30
CVE-2024-22067 ZTE NH8091 product has an improper permission control vulnerability — NH8091 6.8 Medium 2024-11-18

This page lists every published CVE security advisory associated with ZTE. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.