EIP-2026-103825

PRE-CVE

ZTE ZXV10 H201L - RCE via authentication bypass

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-103825. PoCs published by tasos meletlidis.

AI-analyzed exploit summary This exploit demonstrates an authentication bypass and remote code execution (RCE) vulnerability in ZTE ZXV10 H201L routers. It leaks the configuration file, decrypts it to extract credentials, and then injects commands via the DDNS configuration interface.

Description

ZTE ZXV10 H201L - RCE via authentication bypass

Exploits (1)

exploitdb WORKING POC

by tasos meletlidis · pythonlocalmultiple

https://www.exploit-db.com/exploits/52279

View Code ZIP pw:eip

This exploit demonstrates an authentication bypass and remote code execution (RCE) vulnerability in ZTE ZXV10 H201L routers. It leaks the configuration file, decrypts it to extract credentials, and then injects commands via the DDNS configuration interface.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: ZTE ZXV10 H201L

No auth needed

Prerequisites: Network access to the target device · Configuration file leak via unauthenticated endpoint

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1078 - Valid Accounts T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026