PT-2026-43624 · Zte · Zxunipos Nds-Lte

Venom Nguyen · Published 2026-05-27 · Updated 2026-05-27 · CVE-2026-49002

NVD

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Access control failure means that an application does not effectively check user access permissions, so that unauthorized users can access system data beyond their permissions, such as viewing and modifying configuration information.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-49002

Affected Products

Zxunipos Nds-Lte

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-49002 · Security Note
• https://reddit.com/r/pwnhub/comments/1tphfiv/critical_application_access_control_bypass · Reddit Post
• https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/6783201397271515377 · Note