Skip to content
OpenAdvisories
Medium · 5.5 CVE-2026-108506 EUVD-2026-96303GHSA-f7mj-qxpc-pc3x

Unauthorized access vulnerability in ZTE Z80 Ultra product

Published Oct 10, 2026 · Updated Oct 11, 2026 · Assigned by zte

Description

ZTE Z80 Ultra's system interfaces do not have robust invocation authentication, with inadequate access control. Third-party apps may call the interfaces through reflection and retrieve relevant information.

Affected products

VendorProductAffectedFixed
ZTE Z80 Ultra GEN_ZTE_PQ85A01V1.0.0B27 and prior released versions —

References