CVE-2026-108501 — Unauthorized access vulnerability in ZTE Z80 Ultra product

CVE-2026-108501

Unauthorized access vulnerability in ZTE Z80 Ultra product PUBLISHED

Description (CNA)

ZTE Z80 Ultra has a system interface permission verification defect. The interface lacks necessary access control, and relevant information can be read by reflectively invoking the interface.

Affected (CNA)

Vendor / product	Versions
ZTE / ZTE Z80 Ultra	affected GEN_ZTE_PQ85A01V1.0.0B27 and prior released versions

CWE

CWE-269

References

https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/1450988451697172601

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.