PT-2026-43624 · Zte · Zxunipos Nds-Lte

Venom Nguyen · Publicado 2026-05-27 · Atualizado 2026-05-27 · CVE-2026-49002

NVD

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Access control failure means that an application does not effectively check user access permissions, so that unauthorized users can access system data beyond their permissions, such as viewing and modifying configuration information.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2026-49002

Produtos afetados

Zxunipos Nds-Lte

Referências · 3

• https://reddit.com/r/pwnhub/comments/1tphfiv/critical_application_access_control_bypass · Publicação no Reddit
• https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/6783201397271515377 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-49002 · Nota de Segurança