Skip to content
OpenAdvisories

Vendor

ZTE

131 known vulnerabilities.

Products

GoldenDB 13 ZXCLOUD iRAI 11 ZXHN F670 7 Z80 Ultra 5 SmartLife 5 ZXUniPOS NDS-LTE 5 F689 4 MC801A 3 MC801A1 3 ZXCLOUD GoldenData VAP 3 E8820V3 2 MU5250 2 ZTE MF920 2 ZX10 1800-2S 2 ZTE WF820+ LTE Outdoor CPE 2 T5400 2 ZXHN H168N 2 ZXUPN-9000E 2 ZXR10 1800-2S 2 ZXCDN IAMWEB 2 C520V21 2 ZXDU68 S202 V5.0 1 MF258 1 ZX297520V3 1 F50 1 Red Magic 8 Pro 1 ZXUN-ePDG 1 ZTE PROCESS Guard service 1 OX-330P 1 Some ZTE Mobile Phones 1 MF258K 1 Mobile Internet Products 1 F6x2W 1 ZTE Z80 Ultra 1 MF286R 1 OTCP 1 NX799J (Red Magic 11 Air) 1 NebulaOS 1 NetNumenU31R20 1 ElasticNet RNIA R18 NGI 1
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Low 3.3
    CVE-2026-108505

    Information disclosure vulnerability in ZTE Z80 Ultra product

    ZTE Z80 Ultra has a local information disclosure vulnerability. Third-party applications can capture data returned by system interfaces to obtain device-related information.

    ZTE Z80 Ultra
  • Low 3.3
    CVE-2026-108503

    Unauthorized information acquisition vulnerability in ZTE Z80 Ultra product

    ZTE Z80 Ultra has an interface permission validation vulnerability. The callable functions provided by the system lack sufficient access control. An attacker can leverage these functions to read relevant information.

    ZTE Z80 Ultra
  • Low 3.3
    CVE-2026-108502

    Information disclosure vulnerability in ZTE Z80 Ultra product

    ZTE Z80 Ultra contains an information disclosure vulnerability, through which third-party applications can read relevant information by hooking system APIs.

    ZTE Z80 Ultra
  • Low 3.3
    CVE-2026-86551

    Wi-Fi MAC Address Obtainment by Non-privileged Program Vulnerability in ZTE Z80Ultra (NX741J) product

    The Z80Ultra (NX741J) product contains a vulnerability where non-privileged programs can retrieve the Wi-Fi MAC address by querying the read-only field factory_mac_address in the Settings.Secure database.

    ZTE NX741J
  • Low 2.4
    CVE-2026-49005

    Root password hash exposure vulnerability in ZTE F689 product

    The root password hash of the device can be obtained through unencrypted information in the firmware.

    ZTE F689
  • Low 3.9
    CVE-2026-8029

    SQL Injection Vulnerability in ZTE SmartLife App

    The ZTE Smart Life app contains an SQL injection vulnerability that allows attackers to execute UNION SELECT statements to query sensitive data in the feedback.db database across tables, including user accounts, phone numbers, feedback content, and local debu…

    ZTE SmartLife
  • Low 1.8
    CVE-2026-40000 Public exploit

    Path Traversal Vulnerability in ZTE Blade A75 5G

    The Activity zte.com.cn.filer/zte.com.cn.filer.FilePreViewActivity within ZTE File Manager is designed to preview compressed files. Third-party applications can launch this Activity and supply arbitrary file paths (e.g., content://zte.com.cn.filer.fileprovide…

    ZTE Blade A75 5G
  • Low 3.8
    CVE-2026-44410

    Function Abusement Vulnerability in ZTE ZXUniPOS NDS-LTE

    This vulnerability stems from a business logic flaw.Attackers can exploit legitimate application functions in unintended and abnormal ways, deviating from the designer's expectations, to carry out malicious attacks.

    ZTE ZXUniPOS NDS-LTE
  • Low 3.5
    CVE-2025-26710

    There is an an information disclosure vulnerability in ZTE T5400. Due to improper configuration of the access control m…

    ZTE T5400
  • Low 3.9
    CVE-2023-41782

    DLL Hijacking Vulnerability in ZTE ZXCLOUD iRAI

    There is a DLL hijacking vulnerability in ZTE ZXCLOUD iRAI, an attacker could place a fake DLL file in a specific directory and successfully exploit this vulnerability to execute malicious code.

    ZTE ZXCLOUD iRAI