CVE-2026-44409
Analyzed Analyzed - Analysis Complete
Information Disclosure in ZTE MU5250

Publication date: 2026-05-22

Last updated on: 2026-06-03

Assigner: ZTE Corporation

Description
There is an an information disclosure vulnerability in ZTE MU5250. Due to improper configuration of the access control mechanism, attackers can obtain information without authorization, causing the risk of information disclosure.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-05-22
Last Modified
2026-06-03
Generated
2026-06-11
AI Q&A
2026-05-22
EPSS Evaluated
2026-06-10
NVD
CVE-2026-44409
EUVD
EUVD-2026-31408
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
zte mu5250_firmware 1.0.0b27
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
CWE-200 The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is an information disclosure issue found in the ZTE MU5250 device. It occurs because the access control mechanism is improperly configured, allowing attackers to access information without proper authorization.

Impact Analysis

The impact of this vulnerability is that unauthorized attackers can obtain sensitive information from the affected device. This can lead to a risk of information disclosure, potentially exposing confidential or sensitive data.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-44409. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart