Local Information Disclosure in ZTE Z80 Ultra Device
CVE-2026-108505

3.3LOW

Key Information:

Vendor

Zte

Status
Z80 Ultra
Vendor
CVE Published:
10 October 2026

What is CVE-2026-108505?

The ZTE Z80 Ultra is susceptible to a local information disclosure vulnerability, enabling third-party applications to capture sensitive data returned by system interfaces. This flaw can lead to unauthorized access to device-related information, posing a risk to user privacy and data integrity. It is crucial for users and administrators to be aware of this issue to implement necessary security measures.

Affected Version(s)

Z80 Ultra GEN_ZTE_PQ85A01V1.0.0B27 and prior released versions

References

https://support.zte.com.cn/zte-iccp-isupport-webui/bullet...

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

EliGold
.