CVE-2026-49008 — Integrity‑check credential leakage vulnerability in an application function of ZTE F689 product

CVE-2026-49008

Integrity‑check credential leakage vulnerability in an application function of ZTE F689 product PUBLISHED

Description (CNA)

By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to the integrity verification of a specific application function on the device.

Affected (CNA)

Vendor / product	Versions
ZTE / F689	affected ZXHN F680V9.0.10P6N1,ZXHN F680V9.0.10P4N4,ZXHN F680V9.0.10P4N5,ZXHN F680V9.0.10P4N9,ZXHN F680V9.0.10P4N10,ZXHN F680V9.0.10P1N12,ZXHN F680V9.0.10P1N13

CWE

CWE-321

References

https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/2171542593031803093

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.