Cross-Site Request Forgery Vulnerability in ZTE ICCP Web UI

CVE-2026-49001

What is CVE-2026-49001?

A Cross-Site Request Forgery (CSRF) vulnerability in the ZTE ICCP Web UI allows attackers to exploit an authenticated user's session. This can lead to unauthorized actions being performed on behalf of the user, potentially compromising sensitive configuration settings and enabling malicious alterations. Users of the system should implement protective measures to safeguard against such attacks, as the vulnerability can be exploited through the manipulation of user requests without their knowledge.

References