CVE-2025-46581

ZTE ZXCDN product has a Struts RCE Vulnerability PUBLISHED

Description (CNA)

ZTE's ZXCDN product is affected by a Struts remote code execution (RCE) vulnerability. An unauthenticated attacker can remotely execute commands with non-root privileges.

Affected (CNA)

Vendor / product	Versions
ZTE / ZXCDN	affected ZXCDN-SNS V3.01.02

CWE

CWE-94

References

https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/3747693852734546826

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.