CVEs published by ZTE Corporation

CVEs published by ZTE Corporation (CVE Numbering Authority). 6 tracked.

CVE-2026-49004 MEDIUM 6.5 The built-in PostgreSQL service on the mobile device suffers from misconfiguration flaws and command injection
CVE-2026-49007 HIGH 7.5 By accessing unencrypted information in the device firmware, an attacker can obtain the initial login credenti
CVE-2026-49008 MEDIUM 6.5 By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to the
CVE-2026-49006 MEDIUM 5.3 By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to TLS
CVE-2026-8029 LOW 3.9 The ZTE Smart Life app contains an SQL injection vulnerability that allows attackers to execute UNION SELECT s
CVE-2026-49005 LOW 2.4 The root password hash of the device can be obtained through unencrypted information in the firmware.