ZTE
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| GoldenDB | 13 | – | Apr 27, 2025 |
| ZXCLOUD IRAI | 11 | – | May 7, 2026 |
| SmartLife | 5 | – | Sep 20, 2026 |
| Z80 Ultra | 5 | – | Oct 10, 2026 |
| ZXUniPOS NDS-LTE | 5 | – | May 27, 2026 |
| F689 | 4 | – | Aug 7, 2026 |
| MC801A | 3 | – | Dec 14, 2023 |
| MC801A1 | 3 | – | Dec 14, 2023 |
| MU5250 | 2 | – | May 22, 2026 |
| T5400 | 2 | – | Sep 16, 2025 |
| Mobile Internet Products | 1 | – | Dec 14, 2023 |
| NebulaOS | 1 | – | Sep 8, 2026 |
| NetNumenU31R20 | 1 | – | Jun 24, 2020 |
| NH8091 | 1 | – | Nov 18, 2024 |
| NX741J | 1 | – | Sep 20, 2026 |
| NX799J (Red Magic 11 Air) | 1 | – | Aug 5, 2026 |
| Red Magic 11 Pro (NX809J) | 1 | – | Apr 17, 2026 |
| Red Magic 8 Pro | 1 | – | Jan 4, 2024 |
| SCP | 1 | – | Aug 26, 2026 |
| Some ZTE Mobile Phones | 1 | – | Aug 17, 2023 |
| U30 Air | 1 | – | Sep 30, 2026 |
| ZENIC ONE R58 | 1 | – | Dec 30, 2024 |
| ZTE Link | 1 | – | Mar 7, 2025 |
| ZTE PROCESS Guard service | 1 | – | May 6, 2026 |
| ZTE Z80 Ultra | 1 | – | Oct 10, 2026 |
| ZX297520V3 BootROM | 1 | – | May 7, 2026 |
| ZXCDN | 1 | – | Oct 14, 2025 |
| ZXDU68 S202 V5.0 | 1 | – | Aug 31, 2026 |
| ZXEDM iEMS | 1 | – | Apr 13, 2026 |
| ZXHN H388X | 1 | – | Jun 20, 2024 |
| ZXMP M721 | 1 | – | Oct 27, 2025 |
| ZXR10 1800-2S | 1 | – | Oct 29, 2024 |
| ZXR10 1800-2S series ,ZXR10 2800-4,ZXR10 3800-8,ZXR10 160 series | 1 | – | Oct 10, 2024 |
| ZXUN-ePDG | 1 | – | May 10, 2024 |
| ZXV10 ET301 | 1 | – | Aug 8, 2024 |
| Blade A75 5G | 1 | – | Jul 27, 2026 |
| ZXV10 XT802 | 1 | – | Aug 8, 2024 |
| ElasticNet RNIA R18 NGI | 1 | – | Nov 2, 2026 |
| ElasticNet UME R32 | 1 | – | Nov 27, 2025 |
| F50 | 1 | – | Aug 15, 2025 |
| MC889A Pro | 1 | – | Oct 27, 2025 |
| MF258 | 1 | – | Jan 10, 2024 |
| MF258 Pro | 1 | – | Oct 29, 2024 |
| MF258K | 1 | – | Jan 9, 2026 |
| MF286R | 1 | – | Aug 25, 2023 |
| MF296R | 1 | – | Sep 18, 2024 |
Exploited and recent CVEs
- CVE-2026-118871 SQL Injection vulnerability in ZTE ElasticNet RNIA R18 NGI product 0.3%
- CVE-2026-108506 Unauthorized access vulnerability in ZTE Z80 Ultra product 0.1%
- CVE-2026-108505 Information disclosure vulnerability in ZTE Z80 Ultra product 0.1%
- CVE-2026-108504 Unauthorized information retrieval vulnerability in ZTE Z80 Ultra product 0.1%
- CVE-2026-108503 Unauthorized information acquisition vulnerability in ZTE Z80 Ultra product 0.1%
- CVE-2026-108502 Information disclosure vulnerability in ZTE Z80 Ultra product 0.1%
- CVE-2026-108501 Unauthorized access vulnerability in ZTE Z80 Ultra product 0.2%
- CVE-2026-86556 An information disclosure vulnerability in ZTE U30 Air product 0.2%
- CVE-2026-86555 Hardcoded Key Vulnerability in ZTE SmartLife APP 0.2%
- CVE-2026-86554 Email enumeration and account ID leakage vulnerabilities in ZTE SmartLife APP 0.3%
- CVE-2026-86553 A password reset vulnerability in ZTE SmartLife APP 0.5%
- CVE-2026-86552 A vulnerability that skips email ownership verification for account registration in ZTE SmartLife APP 0.4%
- CVE-2026-86551 Wi-Fi MAC Address Obtainment by Non-privileged Program Vulnerability in ZTE Z80Ultra (NX741J) product 0.2%
- CVE-2026-86550 UXSS vulnerability in ZTE browser products 0.5%
- CVE-2026-49003 Unauthenticated RCE Vulnerability in ZTE ZXDU68 S202 V5.0 Product 2.4%
- CVE-2026-9668 SQL injection vulnerability in ZTE SCP product 0.8%
- CVE-2026-49008 Integrity‑check credential leakage vulnerability in an application function of ZTE F689 product 0.3%
- CVE-2026-49007 Information leakage vulnerability in ZTE F689 product 0.4%
- CVE-2026-49006 TLS credential leakage vulnerability in ZTE F689 product 0.2%
- CVE-2026-49005 Root password hash exposure vulnerability in ZTE F689 product 0.2%
- CVE-2026-8029 SQL Injection Vulnerability in ZTE SmartLife App 0.2%
- CVE-2026-49004 PostgreSQL Misconfiguration and Command Injection Vulnerability in ZTE NX799J (Red Magic 11 Air) Product 1.2%
- CVE-2026-40000 Path Traversal Vulnerability in ZTE Blade A75 5G 0.2%
- CVE-2026-49002 Broken Access Control Vulnerabily in ZTE ZXUniPOS NDS-LTE product 0.3%
- CVE-2026-49001 Cross-Site Request Forgery (CSRF) vulnerability in ZTE ZXUniPOS NDS-LTE product 0.1%
- CVE-2026-49000 Cryptography Implementation Flaw vulnerability in ZTE ZXUniPOS NDS-LTE product 0.1%
- CVE-2026-48999 Stored Cross-Site Scripting (XSS) vulnerability in ZTE ZXUniPOS NDS-LTE product 0.2%
- CVE-2026-44410 Function Abusement Vulnerability in ZTE ZXUniPOS NDS-LTE 0.1%
- CVE-2026-44409 Information disclosure vulnerability in ZTE MU5250 0.2%
- CVE-2026-44408 Unauthorized access vulnerability in ZTE MU5250 0.3%