What’s Vulnerable › Vulnerabilities
CVE-2026-108503: Unauthorized information acquisition vulnerability in ZTE Z80 Ultra product
- Severity: low (CVSS 3.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-10-10 · updated 2026-10-13
- Weakness: CWE-276
Description
ZTE Z80 Ultra has an interface permission validation vulnerability. The callable functions provided by the system lack sufficient access control. An attacker can leverage these functions to read relevant information.
Affected products
- ZTE Z80 Ultra: GEN_ZTE_PQ85A01V1.0.0B27 and prior released versions
References
Get alerted when CVE-2026-108503 or the next vulnerability affects your stack