What’s Vulnerable › Vulnerabilities

CVE-2026-44410: Function Abusement Vulnerability in ZTE ZXUniPOS NDS-LTE

• Severity: low (CVSS 3.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-26 · updated 2026-07-24
• Weakness: CWE-1240

Description

This vulnerability stems from a business logic flaw.Attackers can exploit legitimate application functions in unintended and abnormal ways, deviating from the designer's expectations, to carry out malicious attacks.

Affected products

• ZTE ZXUniPOS NDS-LTE: Versions < V25.30.40

References

• https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/3711746568357343383

Get alerted when CVE-2026-44410 or the next vulnerability affects your stack