CVE-2026-108506 — Unauthorized access vulnerability in ZTE Z80 Ultra product

CVE-2026-108506

Unauthorized access vulnerability in ZTE Z80 Ultra product PUBLISHED

Description (CNA)

ZTE Z80 Ultra's system interfaces do not have robust invocation authentication, with inadequate access control. Third-party apps may call the interfaces through reflection and retrieve relevant information.

Affected (CNA)

Vendor / product	Versions
ZTE / Z80 Ultra	affected GEN_ZTE_PQ85A01V1.0.0B27 and prior released versions

CWE

CWE-269

References

https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/7927166620923281253

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.