EIP-2026-102138
PRE-CVEZTE ZXDSL 831CII - Insecure Direct Object Reference
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-102138. PoCs published by Paulos Yibelo.
AI-analyzed exploit summary The exploit demonstrates an insecure direct object reference vulnerability in ZTE ZXDSL 831CII modems, allowing authentication bypass by accessing CGI files directly without HTTP Basic authentication. This grants unauthorized access to sensitive functions like password changes and configuration uploads.
Description
ZTE ZXDSL 831CII - Insecure Direct Object Reference
Exploits (1)
The exploit demonstrates an insecure direct object reference vulnerability in ZTE ZXDSL 831CII modems, allowing authentication bypass by accessing CGI files directly without HTTP Basic authentication. This grants unauthorized access to sensitive functions like password changes and configuration uploads.