CVE-2026-44408
CWE-200Published: May 19, 2026· Updated: May 19, 2026
Official Description
There is an unauthorized access vulnerability in ZTE MU5250. Due to improper permission control of the Web interface, an unauthorized attacker can modify configuration through the interface.
Technical Analysis
CVE-2026-44408 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.
Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.
A successful exploit results in availability disruption (denial of service), with a CVSS base score of 6.3.
From a weakness classification perspective (CWE-200): Information exposure vulnerabilities leak sensitive data to unauthorized actors.
CVSS v3.1 Vector Breakdown
Exploit & PoC Resources
All References (1)
Quick Facts
Related CVEs (CWE-200)
Recommended Actions
- →Apply vendor patches immediately
- →Monitor CVE-2026-44408 in threat intel feeds
- →Review IDS/IPS signatures for exploitation attempts