CVE-2026-49002CWE-284

Broken Access Control Vulnerabily in ZTE ZXUniPOS NDS-LTE product

Critical · published May 27, 2026

CVSS v3.1
9.1
EPSS
0%
Percentile
33.6
In the wild
Unconfirmed
What it is

Access control failure means that an application does not effectively check user access permissions, so that unauthorized users can access system data beyond their permissions, such as viewing and modifying configuration information.

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00404 · 33.6th percentile
Weakness
CWE-284 · Improper Access Control
Published
2026-05-27T08:19Z
EPSS history
Timeline
  • 27 MAY 08:19Z
    Broken Access Control Vulnerabily in ZTE ZXUniPOS NDS-LTE product
    cvelistv5