CVE-2026-44406CWE-427

DLL Hijacking Vulnerability in ZTE Cloud PC Client uSmartview

Medium · published May 7, 2026

CVSS v3.1
5.7
EPSS
0%
Percentile
9.5
In the wild
Unconfirmed
What it is

ZTE Cloud PC client uSmartView contains a DLL hijacking vulnerability; since uSmartViewServiceAgent.exe runs with SYSTEM privileges, successful hijacking enables local arbitrary code execution, privilege escalation, and memory corruption.contains a DLL hijacking vulnerability; since uSmartViewServiceAgent.exe runs with SYSTEM privileges, successful hijacking enables local arbitrary code execution, privilege escalation, and memory corruption.

The record
Technical detail
CVSS v3.1
5.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00201 · 9.5th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2026-05-07T06:49Z
EPSS history
Timeline
  • 07 MAY 06:49Z
    DLL Hijacking Vulnerability in ZTE Cloud PC Client uSmartview
    cvelistv5