Skip to content
OpenAdvisories
Medium · 5.7 CVE-2026-44406 EUVD-2026-28329GHSA-wxrx-7hm4-9f7q

DLL Hijacking Vulnerability in ZTE Cloud PC Client uSmartview

Published May 7, 2026 · Updated May 7, 2026 · Assigned by zte

Description

ZTE Cloud PC client uSmartView contains a DLL hijacking vulnerability; since uSmartViewServiceAgent.exe runs with SYSTEM privileges, successful hijacking enables local arbitrary code execution, privilege escalation, and memory corruption.contains a DLL hijacking vulnerability; since uSmartViewServiceAgent.exe runs with SYSTEM privileges, successful hijacking enables local arbitrary code execution, privilege escalation, and memory corruption.

Affected products

VendorProductAffectedFixed
ZTE ZXCLOUD iRAI ZXCLOUD-iRAI-ClientV7.2X —

References