HOMEVULNERABILITIESCVE-2026-34472
HIGHPOC

CVE-2026-34472

CWE-200Published: March 30, 2026· Updated: Apr 1, 2026

7.1
CVSS v3.1
EPSS:0.04%probability of exploitation in 30 daysPercentile:10.7th

Official Description

Unauthenticated credential disclosure in the wizard interface in ZTE ZXHN H188A V6.0.10P2_TE and V6.0.10P3N3_TE allows unauthenticated attackers on the local network to retrieve sensitive credentials from the router's web management interface, including the default administrator password, WLAN PSK, and PPPoE credentials. In some observed cases, configuration changes may also be performed without authentication.

NVD Source

Technical Analysis

CVE-2026-34472 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), with a CVSS base score of 7.1.

A proof-of-concept (PoC) exploit exists for CVE-2026-34472. While not yet confirmed in active campaigns, the availability of PoC code increases exploitation risk substantially.

From a weakness classification perspective (CWE-200): Information exposure vulnerabilities leak sensitive data to unauthorized actors.

CVSS v3.1 Vector Breakdown

Exploitability
Attack VectorAdjacent
Attack ComplexityLow
Privileges Req.None
User InteractionNone
ScopeUnchanged
Impact
ConfidentialityHigh
IntegrityLow
AvailabilityNone
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Exploit & PoC Resources

POC AVAILABLEProof-of-concept code exists
External links open in a new tab. Always verify in a controlled environment before use.

All References (2)

Quick Facts

CVE IDCVE-2026-34472
CVSS Score7.1 / 10
SeverityHIGH
WeaknessCWE-200
CISA KEVNo
ExploitPOC
EPSS (30d)0.04%
PublishedMar 30, 2026

Related CVEs (CWE-200)

Recommended Actions

  • Apply vendor patches immediately
  • Monitor CVE-2026-34472 in threat intel feeds
  • Review IDS/IPS signatures for exploitation attempts
Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWATCH.COM. CVE data is provided under the NVD usage policy.