Remote DoS Vulnerability in ZTE Cloud PC uSmartview

Publication date: 2026-05-07

Last updated on: 2026-05-11

Assigner: ZTE Corporation

Description

A remote denial-of-service vulnerability exists in the ZTE Cloud PC client uSmartview, which may lead to memory corruption and remote denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-07

Last Modified

2026-05-11

Generated

2026-07-07

AI Q&A

2026-05-07

EPSS Evaluated

2026-07-05

NVD

CVE-2026-44407

EUVD

EUVD-2026-28340

Affected Vendors & Products

Vendor	Product	Version / Range
zte	zxcloud_irai	From 7.23.20 (inc) to 7.25.43 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-134	The product uses a function that accepts a format string as an argument, but the format string originates from an external source.

Attack-Flow Graph

Executive Summary

This vulnerability is a remote denial-of-service issue found in the ZTE Cloud PC client called uSmartview. It can cause memory corruption, which may lead to the application or system becoming unresponsive or crashing when exploited remotely.

Impact Analysis

Exploitation of this vulnerability can result in a denial of service, meaning that the affected ZTE Cloud PC client may crash or become unavailable. This can disrupt normal operations and potentially cause loss of availability for users relying on this software.

Hi! I’m here to help you understand CVE-2026-44407. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70