CVE-2026-44410CWE-1240

Function Abusement Vulnerability in ZTE ZXUniPOS NDS-LTE

Low · published May 26, 2026

CVSS v3.1
3.8
EPSS
0%
Percentile
10.8
In the wild
Unconfirmed
What it is

This vulnerability stems from a business logic flaw.Attackers can exploit legitimate application functions in unintended and abnormal ways, deviating from the designer's expectations, to carry out malicious attacks.

The record
Technical detail
CVSS v3.1
3.8 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00211 · 10.8th percentile
Weakness
CWE-1240 · Use of a Cryptographic Primitive with a Risky Implementation
Published
2026-05-26T09:39Z
EPSS history
Timeline
  • 26 MAY 09:39Z
    Function Abusement Vulnerability in ZTE ZXUniPOS NDS-LTE
    cvelistv5