ByteOS Network

NVD Vulnerability Details :

CVE-2025-26709

Awaiting Analysis

Source-psirt@zte.com.cn

Published At-15 Aug, 2025 | 11:15

Updated At-15 Aug, 2025 | 13:12

There is an unauthorized access vulnerability in ZTE F50. Due to improper permission control of the Web module interface, an unauthorized attacker can obtain sensitive information through the interface

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	5.7	MEDIUM	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses

CWE ID	Type	Source
CWE-200	Secondary	psirt@zte.com.cn

References

Hyperlink	Source	Resource
https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/1288700446535356789	psirt@zte.com.cn	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History