PT-2026-43489 · Zte · Zxunipos Nds-Lte

Venom Nguyen · Published 2026-05-27 · Updated 2026-05-27 · CVE-2026-48999

NVD

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:H/A:L

Attackers carefully craft malicious scripts, such as JavaScript, and inject them into target systems; when other users access pages containing such malicious content, the scripts are automatically loaded and executed in the victim's browser.Attackers can thereby steal user cookies, hijack session privileges, and tamper with page content.Since the malicious code is stored within the system, the attack scope is broad and the concealment is strong, making it frequently employed for data theft attacks.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-48999

Affected Products

Zxunipos Nds-Lte

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-48999 · Security Note
• https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/2811026568490730190 · Note