Command Injection Vulnerability in ZTE Communications Product

CVE-2026-49003

What is CVE-2026-49003?

A command injection vulnerability in ZTE's communications product allows attackers to execute unauthorized commands, potentially deleting critical system runtime files. This exploitation may lead to the failure of the monitoring module, granting the attacker root privileges to access sensitive information, including configuration passwords. With these elevated privileges, an attacker can alter vital system parameters, compromising the reliability and security of the entire power system.

References