Unauthenticated Credential Disclosure in ZTE ZXHN Router

CVE-2026-34472

What is CVE-2026-34472?

The ZTE ZXHN H188A router exhibits a vulnerability in its wizard interface, allowing unauthenticated users on the local network to access sensitive credentials. This includes retrieval of the default administrator password, WLAN Pre-Shared Key (PSK), and PPPoE credentials from the router's web management interface. In certain instances, unauthorized changes to configurations can also be executed without authentication, posing a significant security risk to users and their networks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References