PatchTheCVEzte vulnerabilities
Recent CVEs affecting zte products. 6 tracked.
zte has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-05-07. Highest priority: CVE-2026-40436 (score 27/100).
- CVE-2026-44407 MEDIUM 4.7 UPGRADE A remote denial-of-service vulnerability exists in the ZTE Cloud PC client uSmartview, which may lead to memor
- CVE-2026-40002 MEDIUM 5.0 UPGRADE Red Magic 11 Pro (NX809J) contains a vulnerability that allows non-privileged applications to trigger sensitiv
- CVE-2026-40436 HIGH 7.1 DOWNGRADE The ZTE ZXEDM iEMS product has a password reset vulnerability for any user.Because the management of the cloud
- CVE-2026-44406 MEDIUM 5.7 UPGRADE ZTE Cloud PC client uSmartView contains a DLL hijacking vulnerability; since uSmartViewServiceAgent.exe runs w
- CVE-2026-40004 MEDIUM 5.5 UPGRADE There exists an openssl.cnf privilege escalation vulnerability in ZTE Cloud PC client uSmartview
- CVE-2026-40003 MEDIUM 5.1 MITIGATE ZTE ZX297520V3 BootROM contains a vulnerability that allows arbitrary memory writes via USB
FAQ
How do I fix zte vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is zte being exploited right now?
None of the tracked zte CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which zte CVE should I patch first?
CVE-2026-40436 currently ranks highest (27/100): The ZTE ZXEDM iEMS product has a password reset vulnerability for any user.Because the management of the cloud.