File Write Vulnerability in Red Magic 11 Pro by ZTE

CVE-2026-40002

What is CVE-2026-40002?

The Red Magic 11 Pro (NX809J) has a security flaw that enables non-privileged applications to perform sensitive operations. This vulnerability arises from insufficient validation procedures for applications that access the service interface. An attacker could exploit this weakness to write files to designated partitions and modify system properties, potentially leading to unauthorized access and control over the device's functionality.

References