Skip to content
OpenAdvisories
Low · 3.3 CVE-2026-86551 EUVD-2026-83644GHSA-6m7c-q258-g6cp

Wi-Fi MAC Address Obtainment by Non-privileged Program Vulnerability in ZTE Z80Ultra (NX741J) product

Published Sep 20, 2026 · Updated Sep 21, 2026 · Assigned by zte

Description

The Z80Ultra (NX741J) product contains a vulnerability where non-privileged programs can retrieve the Wi-Fi MAC address by querying the read-only field factory_mac_address in the Settings.Secure database.

Affected products

VendorProductAffectedFixed
ZTE NX741J GEN_ZTE_PQ85A01V1.0.0B23MR3 and all prior released versions —

References