Vulnerabilities > ZTE
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2025-03-11 | CVE-2025-26702 | Unspecified vulnerability in ZTE Goldendb Improper Input Validation vulnerability in ZTE GoldenDB allows Input Data Manipulation.This issue affects GoldenDB: from 6.1.03 through 6.1.03.04. | 7.5 |
| 2025-03-11 | CVE-2025-26703 | Unspecified vulnerability in ZTE Goldendb Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1.03.04. | 4.3 |
| 2024-12-30 | CVE-2024-22063 | Improper Neutralization of Formula Elements in a CSV File vulnerability in ZTE Zenic ONE R58 The ZENIC ONE R58 products by ZTE Corporation have a command injection vulnerability. | 9.0 |
| 2024-11-18 | CVE-2024-22067 | Unspecified vulnerability in ZTE Nh8091 Firmware Znh8091V1.8 ZTE NH8091 product has an improper permission control vulnerability. | 8.8 |
| 2024-10-29 | CVE-2024-22066 | Authentication Bypass by Capture-replay vulnerability in ZTE products There is a privilege escalation vulnerability in ZTE ZXR10 ZSR V2 intelligent multi service router . | 6.5 |
| 2024-10-29 | CVE-2024-22065 | OS Command Injection vulnerability in ZTE Mf258K PRO Firmware 1.0.0B03 There is a command injection vulnerability in ZTE MF258 Pro product. | 8.8 |
| 2024-10-18 | CVE-2024-10119 | OS Command Injection vulnerability in ZTE Wrtm326 Firmware The wireless router WRTM326 from SECOM does not properly validate a specific parameter. | 9.8 |
| 2024-10-10 | CVE-2024-22068 | Weak Password Requirements vulnerability in ZTE products Improper Privilege Management vulnerability in ZTE ZXR10 1800-2S series ,ZXR10 2800-4,ZXR10 3800-8,ZXR10 160 series on 64 bit allows Functionality Bypass.This issue affects ZXR10 1800-2S series ,ZXR10 2800-4,ZXR10 3800-8,ZXR10 160 series: V4.00.10 and earlier. | 6.5 |
| 2024-09-18 | CVE-2022-39068 | Out-of-bounds Write vulnerability in ZTE Mf296R Firmware Mf296Rnordic1B06 There is a buffer overflow vulnerability in ZTE MF296R. | 6.5 |
| 2024-08-08 | CVE-2024-22069 | Unspecified vulnerability in ZTE Zxv10 Et301 Firmware and Zxv10 Xt802 Firmware There is a permission and access control vulnerability of ZTE's ZXV10 XT802/ET301 product.Attackers with common permissions can log in the terminal web and change the password of the administrator illegally by intercepting requests to change the passwords. | 8.8 |