CVE-2026-44408

—

CVSS 3.1

6.3 medium

EPSS

<1%p17

Published

May 19, 2026 (May 19, 2026)

Modified

Jul 24, 2026

Description

There is an unauthorized access vulnerability in ZTE MU5250. Due to improper permission control of the Web interface, an unauthorized attacker can modify configuration through the interface.

Weakness: CWE-200
Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.