PT-2026-41842 · Zte · Mu5250

Published 2026-05-19 · Updated 2026-05-19 · CVE-2026-44408

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions ZTE MU5250 (affected versions not specified)

Description Improper permission control in the Web interface allows an unauthorized attacker to modify configuration settings.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2026-44408

Affected Products

Mu5250

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-44408 · Security Note
• https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/2657904255874650158 · Note
• https://t.me/cveNotify/163991 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2056673774288711917 · Twitter Post
• https://twitter.com/CVEnew/status/2056670074954768461 · Twitter Post