PT-2026-29045 · Zte · Zxhn H188A

Minanagehsalalma · Publicado 2026-03-30 · Atualizado 2026-05-20 · CVE-2026-34472

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions ZTE ZXHN H188A versions V6.0.10P2 TE through V6.0.10P3N3 TE

Description An issue exists that allows unauthenticated attackers on the local network to retrieve sensitive credentials from the router's web management interface. These credentials include the default administrator password, WLAN PSK, and PPPoE credentials. In some instances, configuration changes can also be made without authentication through the wizard interface.

Recommendations Versions V6.0.10P2 TE and V6.0.10P3N3 TE are affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Missing Authentication

Enumeração de Fraquezas

CWE-200

CWE-306

Identificadores relacionados

CVE-2026-34472

Produtos afetados

Zxhn H188A

Referências · 15

• 🔥 https://exploit-db.com/exploits/52593 · Exploit
• https://reddit.com/r/hacking/comments/1till74/technical_analysis_of_cve202634472_in_zte_h188a · Publicação no Reddit
• https://t.me/cveNotify/158470 · Publicação no Telegram
• https://gist.github.com/minanagehsalalma/7a8516b9b00d0008f2f25750320560c9 · Nota
• https://t.me/secharvester/22537 · Publicação no Telegram
• https://twitter.com/Dinosn/status/2057100814720639343 · Publicação no Twitter
• https://reddit.com/r/h1dpauthz0515pub/comments/1tioxq6/cve202634472_from_router_wizard_logic_to · Publicação no Reddit
• http://seclists.org/fulldisclosure/2026/May/19 · Nota
• https://zte.com.cn/global · Nota
• https://minanagehsalalma.github.io/cve-2026-34472-auth-bypass-zte-h188a-router · Publicação no Reddit
• https://t.me/defcon_news/135829 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-34472 · Nota de Segurança
• https://t.me/RNetsec/23159 · Publicação no Telegram
• https://twitter.com/MonxResearch/status/2052849142330786125 · Publicação no Twitter
• https://i.redd.it/nyigo5ycka2h1.png · Publicação no Reddit