[ Vendor · 7 CVEs ]
ZTE
CVEs affecting ZTE published in the last 30 days, plus any ZTE CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-108506 | 10 Oct 2026 | CVSS 5.5 | ZTE Z80 UltraZTE Z80 Ultra's system interfaces do not have robust invocation authentication, with inadequate access control. Third-party apps may call the… | |
| CVE-2026-108505 | 10 Oct 2026 | CVSS 3.3 | ZTE Z80 UltraZTE Z80 Ultra has a local information disclosure vulnerability. Third-party applications can capture data returned by system interfaces to obtain… | |
| CVE-2026-108504 | 10 Oct 2026 | CVSS 5.5 | ZTE Z80 UltraZTE Z80 Ultra has an unauthorized information disclosure vulnerability. The access control for methods within the framework is insufficient. An… | |
| CVE-2026-108503 | 10 Oct 2026 | CVSS 3.3 | ZTE Z80 UltraZTE Z80 Ultra has an interface permission validation vulnerability. The callable functions provided by the system lack sufficient access control. An… | |
| CVE-2026-108502 | 10 Oct 2026 | CVSS 3.3 | ZTE Z80 UltraZTE Z80 Ultra contains an information disclosure vulnerability, through which third-party applications can read relevant information by hooking… | |
| CVE-2026-108501 | 10 Oct 2026 | CVSS 5.7 | ZTE Z80 UltraZTE Z80 Ultra has a system interface permission verification defect. The interface lacks necessary access control, and relevant information can be… | |
| CVE-2026-86556 | 30 Sep 2026 | CVSS 5.3 | ZTE U30 AirThere is an information disclosure vulnerability in ZTE U30 Air. Due to improper permission control, attackers can exploit the vulnerability to… |