CVE-2026-49000 — Cryptography Implementation Flaw vulnerability in ZTE ZXUniPOS NDS-LTE product

CVE-2026-49000

Cryptography Implementation Flaw vulnerability in ZTE ZXUniPOS NDS-LTE product PUBLISHED

Description (CNA)

An insecure password scheme refers to vulnerabilities arising from improper selection of encryption algorithms, inadequate key management, or flawed code implementation, which may lead to data leakage or tampering, such as hard-coded keys or the use of weak encryption algorithms.

Affected (CNA)

Vendor / product	Versions
ZTE / ZXUniPOS NDS-LTE	affected Versions < V24.40.40CP01 (excluding V24.30.40CP03, V24.40.40CP01)

CWE

CWE-310

References

https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/3711746568357343394

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.