CVE-2026-44409

MediumCVSS 5.7

Published: 22/05/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

12th percentile - higher than 12% of all known CVEs

Summary

An information disclosure vulnerability was found in ZTE MU5250. Due to improper configuration of the access control mechanism, attackers can obtain information without authorization, causing the risk of information disclosure.

Risk Assessment

The organization is at risk of unauthorized access to confidential information stored or processed by the device, potentially leading to data breach.

Recommendation

It is recommended to immediately update the ZTE MU5250 firmware to the latest version and verify the access control configuration.

Other vulnerabilities in ZTE MU5250

CVE-2026-44408Medium
Unauthorized access vulnerability in ZTE MU5250 due to improper permission control of the Web interface allows an unauthorized attacker to modify configuration.

Original NVD description (English source)

There is an an information disclosure vulnerability in ZTE MU5250. Due to improper configuration of the access control mechanism, attackers can obtain information without authorization, causing the risk of information disclosure.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS