PT-2026-43568 · Zte · Zxunipos Nds-Lte

Venom Nguyen · Published 2026-05-27 · Updated 2026-05-27 · CVE-2026-49001

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:H/A:L

Name of the Vulnerable Software and Affected Versions ZTE ZXUniPOS NDS-LTE (affected versions not specified)

Description Cross-site request forgery (CSRF) allows attackers to exploit an authenticated user session to forge requests, which can lead to the execution of unintended operations, such as tampering with configuration data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2026-49001

Affected Products

Zxunipos Nds-Lte

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-49001 · Security Note
• https://t.me/CVEtracker/55075 · Telegram Post
• https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/3711746568357343400 · Note