Privilege Escalation Vulnerability in ZTE GoldenDB

CVE-2025-26707

What is CVE-2025-26707?

The ZTE GoldenDB product suffers from an improper privilege management vulnerability, which allows an attacker to escalate privileges. This vulnerability affects multiple versions from 6.1.03 through to 6.1.03.05, enabling a malicious actor to gain unauthorized access or control over certain operations within the database. Users of the impacted versions are encouraged to assess their systems and apply necessary patches or mitigations as per the vendor's guidance to safeguard against potential exploitation.

References