Insecure Password Scheme in ZTE Products
CVE-2026-49000

5.3MEDIUM

Key Information:

Vendor

Zte

Status
Zxunipos Nds-lte
Vendor
CVE Published:
27 May 2026

What is CVE-2026-49000?

This vulnerability stems from an insecure password scheme that can lead to severe data security risks. It arises due to improper choices in encryption algorithms, insufficient key management, or flawed implementations in code. These issues can allow unauthorized access and manipulation of sensitive data, potentially impacting the integrity and confidentiality of information handled by ZTE communication products.

Affected Version(s)

ZXUniPOS NDS-LTE V24.30.40CP02 and earlier versions

ZXUniPOS NDS-LTE V24.40.40 and earlier versions

References

https://support.zte.com.cn/zte-iccp-isupport-webui/bullet...

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Venom Nguyen
.