Unauthenticated DoS Vulnerability in ZTE Routers
CVE-2026-34473
7.5HIGH
What is CVE-2026-34473?
An unauthenticated denial-of-service vulnerability exists in multiple models of ZTE routers, allowing an attacker to send an oversized application/x-www-form-urlencoded POST body to the management interface. This can render the device unresponsive until it is rebooted. Devices running firmware versions older than 2022 may be particularly affected, although the supplier has indicated that devices post-March 2021 may not be vulnerable, depending on operator firmware variations.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.