https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-44407.htmlhttps://patchthecve.com/cve/CVE-2026-44407.htmlMon, 26 Oct 2026 22:10:00 +0000MEDIUM 4.7: A remote denial-of-service vulnerability exists in the ZTE Cloud PC client uSmartview, which may lead to memory corruption and remote denial of service.https://patchthecve.com/cve/CVE-2026-44406.htmlhttps://patchthecve.com/cve/CVE-2026-44406.htmlMon, 26 Oct 2026 21:10:00 +0000MEDIUM 5.7: ZTE Cloud PC client uSmartView contains a DLL hijacking vulnerability; since uSmartViewServiceAgent.exe runs with SYSTEM privileges, successful hijacking enables local arbitrary code execution, privilege escalation, and memory corruption.contains a DLL hijacking vulnerability; since uSmartViewServichttps://patchthecve.com/cve/CVE-2026-40004.htmlhttps://patchthecve.com/cve/CVE-2026-40004.htmlMon, 26 Oct 2026 19:10:00 +0000MEDIUM 5.5: There exists an openssl.cnf privilege escalation vulnerability in ZTE Cloud PC client uSmartview. An attacker can execute arbitrary code locally and escalate privileges.https://patchthecve.com/cve/CVE-2026-40003.htmlhttps://patchthecve.com/cve/CVE-2026-40003.htmlMon, 26 Oct 2026 19:10:00 +0000MEDIUM 5.1: ZTE ZX297520V3 BootROM contains a vulnerability that allows arbitrary memory writes via USB. Attackers can exploit the lack of target address validation in the USB download mode to write data to any location in BootROM runtime memory, thereby overwriting the stack, hijacking the execution flow, bypahttps://patchthecve.com/cve/CVE-2026-40002.htmlhttps://patchthecve.com/cve/CVE-2026-40002.htmlMon, 26 Oct 2026 22:10:00 +0000MEDIUM 5.0: Red Magic 11 Pro (NX809J) contains a vulnerability that allows non-privileged applications to trigger sensitive operations. The vulnerability stems from the lack of validation for applications accessing the service interface. Exploiting this vulnerability, an attacker can write files to specific parhttps://patchthecve.com/cve/CVE-2026-40436.htmlhttps://patchthecve.com/cve/CVE-2026-40436.htmlMon, 26 Oct 2026 21:10:00 +0000HIGH 7.1: The ZTE ZXEDM iEMS product has a password reset vulnerability for any user.Because the management of the cloud EMS portal does not properly control access to the user list acquisition function, attackers can read all user list information through the user list interface. Attackers can reset the pass