Findings

CVE-2026-44408

There is an unauthorized access vulnerability in ZTE MU5250.

Published May 19, 2026 · updated Jul 24, 2026

There is an unauthorized access vulnerability in ZTE MU5250. Due to improper permission control of the Web interface, an unauthorized attacker can modify configuration through the interface.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. May 19, 2026 · NIST NVD

    Detected

    There is an unauthorized access vulnerability in ZTE MU5250. Due to improper permission control of the Web interface, an unauthorized attacker can modify configuration through the interface.

  2. Jul 24, 2026 · NIST NVD

    Updated

    There is an unauthorized access vulnerability in ZTE MU5250. Due to improper permission control of the Web interface, an unauthorized attacker can modify configuration through the interface.

Sources

  • CVE.orgVulnerability recordCVE-2026-44408

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-44408

    There is an unauthorized access vulnerability in ZTE MU5250. Due to improper permission control of the Web interface, an unauthorized attacker can modify configuration through the interface.

    nvd.nist.gov

References