Search vulnerabilities

Results 5

Export CSV
CVE-2026-108506

Unauthorized access vulnerability in ZTE Z80 Ultra product

ZTE Z80 Ultra's system interfaces do not have robust invocation authentication, with inadequate access control. Third-party apps may call the interfaces through reflection and retrieve relevant information.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Zte
Products
CVE-2026-108505

Information disclosure vulnerability in ZTE Z80 Ultra product

ZTE Z80 Ultra has a local information disclosure vulnerability. Third-party applications can capture data returned by system interfaces to obtain device-related information.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Zte
Products
CVE-2026-108504

Unauthorized information retrieval vulnerability in ZTE Z80 Ultra product

ZTE Z80 Ultra has an unauthorized information disclosure vulnerability. The access control for methods within the framework is insufficient. An attacker can exploit this method to read device-related information.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Zte
Products
CVE-2026-108503

Unauthorized information acquisition vulnerability in ZTE Z80 Ultra product

ZTE Z80 Ultra has an interface permission validation vulnerability. The callable functions provided by the system lack sufficient access control. An attacker can leverage these functions to read relevant information.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Zte
Products
CVE-2026-108502

Information disclosure vulnerability in ZTE Z80 Ultra product

ZTE Z80 Ultra contains an information disclosure vulnerability, through which third-party applications can read relevant information by hooking system APIs.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Zte
Products