ByteOS Network

NVD Vulnerability Details :

CVE-2026-44408

Deferred

Source-psirt@zte.com.cn

Published At-19 May, 2026 | 09:16

Updated At-19 May, 2026 | 14:50

There is an unauthorized access vulnerability in ZTE MU5250. Due to improper permission control of the Web interface, an unauthorized attacker can modify configuration through the interface.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	6.3	MEDIUM	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Type: Secondary

Version: 3.1

Base score: 6.3

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Weaknesses

CWE ID	Type	Source
CWE-200	Secondary	psirt@zte.com.cn

CWE ID: CWE-200

Type: Secondary

Source: psirt@zte.com.cn

References

Hyperlink	Source	Resource
https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/2657904255874650158	psirt@zte.com.cn	N/A

Hyperlink: https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/2657904255874650158

Source: psirt@zte.com.cn

Resource: N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History