PT-2026-29045 · Zte · Zxhn H188A

Minanagehsalalma · Published 2026-03-30 · Updated 2026-05-20 · CVE-2026-34472

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions ZTE ZXHN H188A versions V6.0.10P2 TE through V6.0.10P3N3 TE

Description An issue exists that allows unauthenticated attackers on the local network to retrieve sensitive credentials from the router's web management interface. These credentials include the default administrator password, WLAN PSK, and PPPoE credentials. In some instances, configuration changes can also be made without authentication through the wizard interface.

Recommendations Versions V6.0.10P2 TE and V6.0.10P3N3 TE are affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Missing Authentication

Weakness Enumeration

CWE-200

CWE-306

Related Identifiers

CVE-2026-34472

Affected Products

Zxhn H188A

References · 15

• 🔥 https://exploit-db.com/exploits/52593 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-34472 · Security Note
• http://seclists.org/fulldisclosure/2026/May/19 · Note
• https://gist.github.com/minanagehsalalma/7a8516b9b00d0008f2f25750320560c9 · Note
• https://zte.com.cn/global · Note
• https://i.redd.it/nyigo5ycka2h1.png · Reddit Post
• https://reddit.com/r/h1dpauthz0515pub/comments/1tioxq6/cve202634472_from_router_wizard_logic_to · Reddit Post
• https://t.me/RNetsec/23159 · Telegram Post
• https://t.me/cveNotify/158470 · Telegram Post
• https://minanagehsalalma.github.io/cve-2026-34472-auth-bypass-zte-h188a-router · Reddit Post
• https://t.me/secharvester/22537 · Telegram Post
• https://twitter.com/MonxResearch/status/2052849142330786125 · Twitter Post
• https://t.me/defcon_news/135829 · Telegram Post
• https://twitter.com/Dinosn/status/2057100814720639343 · Twitter Post
• https://reddit.com/r/hacking/comments/1till74/technical_analysis_of_cve202634472_in_zte_h188a · Reddit Post