CVE-2026-49002 — Broken Access Control Vulnerabily in ZTE ZXUniPOS NDS-LTE product

CVE-2026-49002

Broken Access Control Vulnerabily in ZTE ZXUniPOS NDS-LTE product PUBLISHED

Description (CNA)

Access control failure means that an application does not effectively check user access permissions, so that unauthorized users can access system data beyond their permissions, such as viewing and modifying configuration information.

Affected (CNA)

Vendor / product	Versions
ZTE / ZXUniPOS NDS-LTE	affected Versions < V24.40.40CP01 (excluding V24.30.40CP03, V24.40.40CP01)

CWE

CWE-284

References

https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/6783201397271515377

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.