CVE-2026-44409

MEDIUM

ZTE MU5250 - Unauthorized Information Disclosure

Title source: manual

Description

There is an an information disclosure vulnerability in ZTE MU5250. Due to improper configuration of the access control mechanism, attackers can obtain information without authorization, causing the risk of information disclosure.

References (1)

Core 1

Core References

https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/3711746568357343342

Scores

CVSS v3 5.7

EPSS 0.0002

EPSS Percentile 5.2%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-200

Status published

Products (1)

ZTE/MU5250 BD_FLYMODEMMU5250V1.0.0B27

Published May 22, 2026

Tracked Since May 22, 2026