Insecure Password Scheme in ZTE Products
CVE-2026-49000

7HIGH

Key Information:

Vendor

Zte

Status
Zxunipos Nds-lte
Vendor
CVE Published:
27 May 2026

What is CVE-2026-49000?

This vulnerability stems from an insecure password scheme that can lead to severe data security risks. It arises due to improper choices in encryption algorithms, insufficient key management, or flawed implementations in code. These issues can allow unauthorized access and manipulation of sensitive data, potentially impacting the integrity and confidentiality of information handled by ZTE communication products.

Affected Version(s)

ZXUniPOS NDS-LTE Versions < V24.40.40CP01 (excluding V24.30.40CP03, V24.40.40CP01)

References

https://support.zte.com.cn/zte-iccp-isupport-webui/bullet...

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Venom Nguyen
.