CVE-2026-44408

MediumCVSS 6.3

Published: 19/05/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

17th percentile - higher than 17% of all known CVEs

Summary

Unauthorized access vulnerability in ZTE MU5250 due to improper permission control of the Web interface allows an unauthorized attacker to modify configuration.

Risk Assessment

Risk of unauthorized configuration changes to the device, potentially leading to network security breaches.

Recommendation

Update the ZTE MU5250 firmware to the latest patched version.

Original NVD description (English source)

There is an unauthorized access vulnerability in ZTE MU5250. Due to improper permission control of the Web interface, an unauthorized attacker can modify configuration through the interface.