CVE-2026-40001 — Local privilege escalation vulnerability in ZTE PROCESS Guard service of the cloud computer client

CVE-2026-40001

Local privilege escalation vulnerability in ZTE PROCESS Guard service of the cloud computer client PUBLISHED

Description (CNA)

There is a local privilege escalation vulnerability in the ZTE PROCESS Guard service of the cloud computer client, which may allow local arbitrary code execution, privilege escalation and path traversal bypass.

Affected (CNA)

Vendor / product	Versions
ZTE / ZTE PROCESS Guard service	affected ZXCLOUD-iRAI-ClientV7.2X

CWE

CWE-269

References

https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/1477954674427011121

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.