CVE-2026-44406 — DLL Hijacking Vulnerability in ZTE Cloud PC Client uSmartview

CVE-2026-44406

DLL Hijacking Vulnerability in ZTE Cloud PC Client uSmartview PUBLISHED

Description (CNA)

ZTE Cloud PC client uSmartView contains a DLL hijacking vulnerability; since uSmartViewServiceAgent.exe runs with SYSTEM privileges, successful hijacking enables local arbitrary code execution, privilege escalation, and memory corruption.contains a DLL hijacking vulnerability; since uSmartViewServiceAgent.exe runs with SYSTEM privileges, successful hijacking enables local arbitrary code execution, privilege escalation, and memory corruption.

Affected (CNA)

Vendor / product	Versions
ZTE / ZXCLOUD iRAI	affected ZXCLOUD-iRAI-ClientV7.2X

CWE

CWE-427

References

https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/8107253322107965601

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.