Information Disclosure Vulnerability in ZTE Z80 Ultra
CVE-2026-108502

3.3LOW

Key Information:

Vendor

Zte

Status
Vendor
CVE Published:
10 October 2026

What is CVE-2026-108502?

The ZTE Z80 Ultra is affected by an information disclosure vulnerability that allows attackers to exploit third-party applications. By hooking into system APIs, unauthorized entities may gain access to sensitive information, compromising the security of the device. This flaw emphasizes the importance of maintaining robust application security and monitoring system interactions to prevent potential data breaches.

Affected Version(s)

Z80 Ultra GEN_ZTE_PQ85A01V1.0.0B27 and prior released versions

References

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

EliGold
.