CVE-2025-26711CWE-200

There is an unauthorized access vulnerability in ZTE T5400

Medium · published September 16, 2025

CVSS v3.1
5.7
EPSS
0%
Percentile
18.7
In the wild
Unconfirmed
What it is

There is an unauthorized access vulnerability in ZTE T5400. Due to improper permission control of the Web module interface, an unauthorized attacker can obtain sensitive information through the interface.

The record
Technical detail
CVSS v3.1
5.7 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00273 · 18.7th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2025-09-16T09:35Z
EPSS history
Timeline
  • 16 SEP 09:35Z
    There is an unauthorized access vulnerability in ZTE T5400
    cvelistv5