CVE-2025-26711

5.7 mediumEPSS 0.3%

Medium (5.7). EPSS 0.3% chance of exploitation in the next 30 days.

There is an unauthorized access vulnerability in ZTE T5400. Due to improper permission control of the Web module interface, an unauthorized attacker can obtain sensitive information through the interface.

Severity

CVSS 3.1

5.7 medium

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 19% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2025-09-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/1441846006241435677

Check your stack JSON