CVE-2026-49005CWE-916

CVE-2026-49005

Low · published August 7, 2026

CVSS v3.1
2.4
EPSS
0%
Percentile
4.4
In the wild
Unconfirmed
What it is

The root password hash of the device can be obtained through unencrypted information in the firmware.

The record
Technical detail
CVSS v3.1
2.4 · LOW
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00156 · 4.4th percentile
Weakness
CWE-916 · Use of Password Hash With Insufficient Computational Effort
Published
2026-08-07T09:17Z
References (1)
EPSS history
Timeline
  • 07 AUG 03:36Z
    Root password hash exposure vulnerability in ZTE F689 product
    cvelistv5