What’s Vulnerable › Vulnerabilities

CVE-2026-44409: Information disclosure vulnerability in ZTE MU5250

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-22 · updated 2026-07-23
• Weakness: CWE-200

Description

There is an an information disclosure vulnerability in ZTE MU5250. Due to improper configuration of the access control mechanism, attackers can obtain information without authorization, causing the risk of information disclosure.

Affected products

• ZTE MU5250: 1.0.0b27

References

• https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/3711746568357343342

Get alerted when CVE-2026-44409 or the next vulnerability affects your stack