CVE-2026-40004CWE-427

openssl.cnf Privilege Escalation Vulnerability in ZTE Cloud PC Client uSmartview

Medium · published May 7, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
6.5
In the wild
Unconfirmed
What it is

There exists an openssl.cnf privilege escalation vulnerability in ZTE Cloud PC client uSmartview. An attacker can execute arbitrary code locally and escalate privileges.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00174 · 6.5th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2026-05-07T03:47Z
EPSS history
Timeline
  • 07 MAY 03:47Z
    openssl.cnf Privilege Escalation Vulnerability in ZTE Cloud PC Client uSmartview
    cvelistv5