PT-2026-33421 · Nubia · Red Magic 11 Pro

Christopher Nelson · Published 2026-04-17 · Updated 2026-04-17 · CVE-2026-40002

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Red Magic 11 Pro (NX809J) (affected versions not specified)

Description Lack of validation for applications accessing the service interface allows non-privileged applications to trigger sensitive operations. This can enable an attacker to write files to specific partitions and set writable system properties.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2026-40002

Affected Products

Red Magic 11 Pro

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-40002 · Security Note
• https://twitter.com/VulmonFeeds/status/2045127470332964917 · Twitter Post
• https://twitter.com/CVEnew/status/2045102598328307742 · Twitter Post
• https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/8224335890517684583 · Note