ZTE

Products

ProductCVEsExploitedLatest
GoldenDB13–Apr 27, 2025
ZXCLOUD IRAI11–May 7, 2026
SmartLife5–Sep 20, 2026
Z80 Ultra5–Oct 10, 2026
ZXUniPOS NDS-LTE5–May 27, 2026
F6894–Aug 7, 2026
MC801A3–Dec 14, 2023
MC801A13–Dec 14, 2023
MU52502–May 22, 2026
T54002–Sep 16, 2025
Mobile Internet Products1–Dec 14, 2023
NebulaOS1–Sep 8, 2026
NetNumenU31R201–Jun 24, 2020
NH80911–Nov 18, 2024
NX741J1–Sep 20, 2026
NX799J (Red Magic 11 Air)1–Aug 5, 2026
Red Magic 11 Pro (NX809J)1–Apr 17, 2026
Red Magic 8 Pro1–Jan 4, 2024
SCP1–Aug 26, 2026
Some ZTE Mobile Phones1–Aug 17, 2023
U30 Air1–Sep 30, 2026
ZENIC ONE R581–Dec 30, 2024
ZTE Link1–Mar 7, 2025
ZTE PROCESS Guard service1–May 6, 2026
ZTE Z80 Ultra1–Oct 10, 2026
ZX297520V3 BootROM1–May 7, 2026
ZXCDN1–Oct 14, 2025
ZXDU68 S202 V5.01–Aug 31, 2026
ZXEDM iEMS1–Apr 13, 2026
ZXHN H388X1–Jun 20, 2024
ZXMP M7211–Oct 27, 2025
ZXR10 1800-2S1–Oct 29, 2024
ZXR10 1800-2S series ,ZXR10 2800-4,ZXR10 3800-8,ZXR10 160 series1–Oct 10, 2024
ZXUN-ePDG1–May 10, 2024
ZXV10 ET3011–Aug 8, 2024
Blade A75 5G1–Jul 27, 2026
ZXV10 XT8021–Aug 8, 2024
ElasticNet RNIA R18 NGI1–Nov 2, 2026
ElasticNet UME R321–Nov 27, 2025
F501–Aug 15, 2025
MC889A Pro1–Oct 27, 2025
MF2581–Jan 10, 2024
MF258 Pro1–Oct 29, 2024
MF258K1–Jan 9, 2026
MF286R1–Aug 25, 2023
MF296R1–Sep 18, 2024

Exploited and recent CVEs

  • CVE-2026-118871 Medium 6.5 SQL Injection vulnerability in ZTE ElasticNet RNIA R18 NGI product 0.3%
  • CVE-2026-108506 Medium 5.5 Unauthorized access vulnerability in ZTE Z80 Ultra product 0.1%
  • CVE-2026-108505 Low 3.3 Information disclosure vulnerability in ZTE Z80 Ultra product 0.1%
  • CVE-2026-108504 Medium 5.5 Unauthorized information retrieval vulnerability in ZTE Z80 Ultra product 0.1%
  • CVE-2026-108503 Low 3.3 Unauthorized information acquisition vulnerability in ZTE Z80 Ultra product 0.1%
  • CVE-2026-108502 Low 3.3 Information disclosure vulnerability in ZTE Z80 Ultra product 0.1%
  • CVE-2026-108501 Medium 5.7 Unauthorized access vulnerability in ZTE Z80 Ultra product 0.2%
  • CVE-2026-86556 Medium 5.3 An information disclosure vulnerability in ZTE U30 Air product 0.2%
  • CVE-2026-86555 Medium 6.2 Hardcoded Key Vulnerability in ZTE SmartLife APP 0.2%
  • CVE-2026-86554 Medium 4.3 Email enumeration and account ID leakage vulnerabilities in ZTE SmartLife APP 0.3%
  • CVE-2026-86553 High 8.8 A password reset vulnerability in ZTE SmartLife APP 0.5%
  • CVE-2026-86552 Medium 5.4 A vulnerability that skips email ownership verification for account registration in ZTE SmartLife APP 0.4%
  • CVE-2026-86551 Low 3.3 Wi-Fi MAC Address Obtainment by Non-privileged Program Vulnerability in ZTE Z80Ultra (NX741J) product 0.2%
  • CVE-2026-86550 Medium 6.5 UXSS vulnerability in ZTE browser products 0.5%
  • CVE-2026-49003 Critical 9.6 Unauthenticated RCE Vulnerability in ZTE ZXDU68 S202 V5.0 Product 2.4%
  • CVE-2026-9668 Medium 6.3 SQL injection vulnerability in ZTE SCP product 0.8%
  • CVE-2026-49008 Medium 6.5 Integrity‑check credential leakage vulnerability in an application function of ZTE F689 product 0.3%
  • CVE-2026-49007 High 7.5 Information leakage vulnerability in ZTE F689 product 0.4%
  • CVE-2026-49006 Medium 5.3 TLS credential leakage vulnerability in ZTE F689 product 0.2%
  • CVE-2026-49005 Low 2.4 Root password hash exposure vulnerability in ZTE F689 product 0.2%
  • CVE-2026-8029 Low 3.9 SQL Injection Vulnerability in ZTE SmartLife App 0.2%
  • CVE-2026-49004 Medium 6.5 PostgreSQL Misconfiguration and Command Injection Vulnerability in ZTE NX799J (Red Magic 11 Air) Product 1.2%
  • CVE-2026-40000 Low 1.8 Path Traversal Vulnerability in ZTE Blade A75 5G 0.2%
  • CVE-2026-49002 Critical 9.1 Broken Access Control Vulnerabily in ZTE ZXUniPOS NDS-LTE product 0.3%
  • CVE-2026-49001 Medium 5.3 Cross-Site Request Forgery (CSRF) vulnerability in ZTE ZXUniPOS NDS-LTE product 0.1%
  • CVE-2026-49000 High 7.0 Cryptography Implementation Flaw vulnerability in ZTE ZXUniPOS NDS-LTE product 0.1%
  • CVE-2026-48999 Medium 5.7 Stored Cross-Site Scripting (XSS) vulnerability in ZTE ZXUniPOS NDS-LTE product 0.2%
  • CVE-2026-44410 Low 3.8 Function Abusement Vulnerability in ZTE ZXUniPOS NDS-LTE 0.1%
  • CVE-2026-44409 Medium 5.7 Information disclosure vulnerability in ZTE MU5250 0.2%
  • CVE-2026-44408 Medium 6.3 Unauthorized access vulnerability in ZTE MU5250 0.3%