Home

Description

This vulnerability stems from a business logic flaw.Attackers can exploit legitimate application functions in unintended and abnormal ways, deviating from the designer's expectations, to carry out malicious attacks.

PUBLISHED Reserved 2026-05-06 | Published 2026-05-26 | Updated 2026-05-28 | Assigner zte




LOW: 3.8CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L

Problem types

CWE-1240 Use of a cryptographic primitive with a risky implementation

Product status

Default status
unaffected

Versions < V25.30.40
affected

Credits

Venom Nguyen from VNPT-NET finder

References

support.zte.com.cn/...ui/bulletin/detail/3711746568357343383

cve.org (CVE-2026-44410)

nvd.nist.gov (CVE-2026-44410)

Download JSON