CVE-2026-49006

MEDIUM

CVE: CVE-2026-49006 - By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to TLS transmissionSign in to save

CVSS

5.3

CVSS v3.1

EPSS

0.1%

Exploit Prediction Score

Published

August 7, 2026

Exploitability

EPSS probability 0.1%

Description

By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to TLS transmission.

Weaknesses

CWE-321

Affected Packages

No package data available.

Aliases

CVE-2026-49006

Related references

Publisher and database URLs for this record (shown for attribution; reading stays in Bugflare).

https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/460175237240021109