VulnerabilityDeferred

CVE-2026-44408

There is an unauthorized access vulnerability in ZTE MU5250.

MEDIUM 6.3EPSS 0.25%

Does this matter?

Lower severity and a low EPSS score (0.25%). Track it; it rarely justifies an emergency change on its own.

Description

There is an unauthorized access vulnerability in ZTE MU5250. Due to improper permission control of the Web interface, an unauthorized attacker can modify configuration through the interface.

CVSS 3.1: 6.3 MEDIUMCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
EPSS: 0.25% probability · 17th percentile
CISA KEV: Not listed
Weakness: CWE-200
Source: psirt@zte.com.cn

References

https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/2657904255874650158

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.