PT-2026-38328 · Zte · Zxcloud Irai

Published 2026-05-07 · Updated 2026-05-07 · CVE-2026-40004

Mitre

CVSS v3.1

5.5

Medium

Base vector

AV:P/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N

There exists an openssl.cnf privilege escalation vulnerability in ZTE Cloud PC client uSmartview. An attacker can execute arbitrary code locally and escalate privileges.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2026-40004

Affected Products

Zxcloud Irai

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-40004 · Security Note
• https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/3126272076755775573 · Note