{"id":"CVE-2026-34472","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-34472","generatedAt":"2026-10-28T10:46:03.326Z","title":"Unauthenticated credential disclosure in the wizard interface in ZTE ZXHN H188A V6.0.10P2_TE and V6.0.10P3N3_TE allows unauthenticated attackers on the local network to retrieve sensitive credentials from the router's web management interface, including…","description":"Unauthenticated credential disclosure in the wizard interface in ZTE ZXHN H188A V6.0.10P2_TE and V6.0.10P3N3_TE allows unauthenticated attackers on the local network to retrieve sensitive credentials from the router's web management interface, including the default administrator password, WLAN PSK, and PPPoE credentials. In some observed cases, configuration changes may also be performed without authentication.","published":"2026-03-30T16:16:08.000Z","lastModified":"2026-06-17T10:39:06.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.1","score":7.1,"severity":"HIGH","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N"},"cwe":["CWE-200","CWE-306"],"affected":["zte/zxhn h188a firmware"],"epss":{"score":0.08952,"percentile":0.95224,"date":"2026-10-27","history":[{"date":"2026-09-24","score":0.02273,"percentile":0.82327},{"date":"2026-10-25","score":0.08546,"percentile":0.95022}]},"kev":{"listed":false},"exploits":{"count":1,"verified":false,"firstPublished":"2026-05-29","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":52593,"kind":"exploit","title":"ZTE ZXHN H188A V6 - Authentication Bypass","url":"https://www.exploit-db.com/exploits/52593","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/local/52593.txt","file":"exploits/multiple/local/52593.txt","published":"2026-05-29","added":"2026-05-29","updated":"2026-05-29","author":"Mina Nageh Salalma","type":"local","platform":"multiple","port":null,"verified":false,"codes":["CVE-2026-34472"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"urgent","text":"A public exploit is published in Exploit-DB and the impact is high, while EPSS rates exploitation at 9.0%. Anyone can run this; patch or mitigate before the next change window and check exposed instances for signs of use."},"changes":[{"kind":"epss","label":"EPSS jump","at":"2026-10-25T00:00:00.000Z","detail":{"to":0.08546,"from":0.02273,"percentile":0.95022},"summary":"EPSS moved from 2.3% to 8.5% probability of exploitation in the next thirty days."}],"references":[{"url":"https://gist.github.com/minanagehsalalma/7a8516b9b00d0008f2f25750320560c9","tags":["Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://www.zte.com.cn/global/","tags":["Product"],"source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2026/May/19","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-34472","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}