PT-2026-43568 · Zte · Zxunipos Nds-Lte

Venom Nguyen · Published 2026-05-27 · Updated 2026-05-27 · CVE-2026-49001

Mitre

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:H/A:L

Cross-site request forgery (CSRF) vulnerabilities allow attackers to exploit a user's authenticated session to forge cross-site requests, inducing the execution of unintended operations such as tampering with configuration data.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2026-49001

Affected Products

Zxunipos Nds-Lte

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-49001 · Security Note
• https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/3711746568357343400 · Note