[ CVE-2026-108503 · Published 10 Oct 2026 ]

Vulnerability in ZTE Z80 Ultra

CVSS 3.3 EPSS <1%No fix listed yet

[ Description ]Official description

ZTE Z80 Ultra has an interface permission validation vulnerability. The callable functions provided by the system lack sufficient access control. An attacker can leverage these functions to read relevant information.

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.