zte Vulnerability Advisory Catalog

Total 180 security vulnerabilities recorded for zte software and firmware.

← Back to All Vendors
Component: mu5250_firmware

There is an an information disclosure vulnerability in ZTE MU5250. Due to improper configuration of the access control mechanism, attackers can obtain...

๐Ÿ“… 2026-05-22
CVSS 5.7 Dossier →
Component: zxcloud_irai

A remote denial-of-service vulnerability exists in the ZTE Cloud PC client uSmartview, which may lead to memory corruption and remote denial of servic...

๐Ÿ“… 2026-05-07
CVSS 4.7 Dossier →
Component: zxcloud_irai

ZTE Cloud PC clientย uSmartView contains a DLL hijacking vulnerability; since uSmartViewServiceAgent.exe runs with SYSTEM privileges, successful hijack...

๐Ÿ“… 2026-05-07
CVSS 5.7 Dossier →
Component: zxcloud_irai

There exists an openssl.cnf privilege escalation vulnerability in ZTE Cloud PC client uSmartview. An attacker can execute arbitrary code locally and e...

๐Ÿ“… 2026-05-07
CVSS 5.5 Dossier →
Component: zx297520v3_firmware

ZTE ZX297520V3 BootROM contains a vulnerability that allows arbitrary memory writes via USB. Attackers can exploit the lack of target address validati...

๐Ÿ“… 2026-05-07
CVSS 5.1 Dossier →
Component: nubia-in_nx809j_firmware

Red Magic 11 Pro (NX809J)ย contains a vulnerability that allows non-privileged applications to trigger sensitive operations. The vulnerability stems fr...

๐Ÿ“… 2026-04-17
CVSS 5.0 Dossier →
Component: zxesm_iems

The ZTE ZXEDM iEMS product has a password reset vulnerability for any user.Because the management of the cloud EMS portal does not properly control ac...

๐Ÿ“… 2026-04-13
CVSS 7.1 Dossier →
Component: zxhn_h188a_firmware

Unauthenticated credential disclosure in the wizard interface in ZTE ZXHN H188A V6.0.10P2_TE and V6.0.10P3N3_TE allows unauthenticated attackers on th...

๐Ÿ“… 2026-03-30
CVSS 7.1 Dossier →
Component: mf258k_pro_firmware

There is a configuration defect vulnerability in the version server of ZTE MF258K Pro products. Due to improper directory permission settings, an atta...

๐Ÿ“… 2026-01-09
CVSS 4.3 Dossier →
Component: zxcloud_goldendb

There is a code-related vulnerability in the GoldenDB database product. Attackers can access system tables to disrupt the normal operation of business...

๐Ÿ“… 2025-04-27
CVSS 7.7 Dossier →
Component: zxcloud_goldendb

There is a DDE injection vulnerability in the GoldenDB database product. Attackers can inject DDE expressions through the interface, and when users do...

๐Ÿ“… 2025-04-27
CVSS 8.4 Dossier →
Component: zxcloud_goldendb

There are SQL injection vulnerabilities in multiple interfaces of the GoldenDB database product. Attackers can exploit these interfaces to inject comm...

๐Ÿ“… 2025-04-27
CVSS 6.5 Dossier →
Component: zxcloud_goldendb

There is a SQL injection vulnerability in the GoldenDB database product. Attackers can inject commands to extract database information....

๐Ÿ“… 2025-04-27
CVSS 6.5 Dossier →
Component: zxcloud_goldendb

There is a Permission Management and Access Control vulnerability in the GoldenDB database product. Attackers can manipulate requests to bypass privil...

๐Ÿ“… 2025-04-27
CVSS 5.4 Dossier →
Component: zxcloud_goldendb

There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages to obtain the system's sensiti...

๐Ÿ“… 2025-04-27
CVSS 4.9 Dossier →
Component: zxcloud_goldendb

There is an information disclosure vulnerability in the GoldenDB database product. Attackers can exploit error messages to obtain the system's sensiti...

๐Ÿ“… 2025-04-27
CVSS 4.1 Dossier →
Component: goldendb

Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1.03.07....

๐Ÿ“… 2025-03-11
CVSS 5.4 Dossier →
Component: goldendb

Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1.03.05....

๐Ÿ“… 2025-03-11
CVSS 5.3 Dossier →
Component: goldendb

Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1.03.05....

๐Ÿ“… 2025-03-11
CVSS 6.4 Dossier →
Component: goldendb

Improper Privilege Management vulnerability in ZTE GoldenDB allows Privilege Escalation.This issue affects GoldenDB: from 6.1.03 through 6.1.03.04....

๐Ÿ“… 2025-03-11
CVSS 4.3 Dossier →
Component: goldendb

Improper Input Validation vulnerability in ZTE GoldenDB allows Input Data Manipulation.This issue affects GoldenDB: from 6.1.03 through 6.1.03.04....

๐Ÿ“… 2025-03-11
CVSS 4.9 Dossier →
Component: zenic_one_r58

The ZENIC ONE R58 products by ZTE Corporation have a command injection vulnerability. An authenticated attacker can exploit this vulnerability to tamp...

๐Ÿ“… 2024-12-30
CVSS 7.6 Dossier →
Component: nh8091_firmware

ZTE NH8091 product has an improper permission control vulnerability. Due to improper permission control of the Web module interface, an authenticated ...

๐Ÿ“… 2024-11-18
CVSS 6.8 Dossier →
Component: zxr10_1800-2s_firmware

There is a privilege escalation vulnerability in ZTE ZXR10 ZSR V2 intelligent multi service router . An authenticated attacker could use the vulnerabi...

๐Ÿ“… 2024-10-29
CVSS 7.5 Dossier →
Page 1 of 8 (180 Total Records)