CVE-2026-40004

openssl.cnf Privilege Escalation Vulnerability in ZTE Cloud PC Client uSmartview PUBLISHED

Description (CNA)

There exists an openssl.cnf privilege escalation vulnerability in ZTE Cloud PC client uSmartview. An attacker can execute arbitrary code locally and escalate privileges.

Affected (CNA)

Vendor / product	Versions
ZTE / ZXCLOUD iRAI	affected ZXCLOUD-iRAI-ClientV7.2X

CWE

CWE-427

References

https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/3126272076755775573

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.