CVE-2026-86551

Deferred Deferred - Pending Action

BaseFortify

Publication date: 2026-09-20

Last updated on: 2026-09-22

Assigner: ZTE Corporation

Description

The Z80Ultra (NX741J) product contains a vulnerability where non-privileged programs can retrieve the Wi-Fi MAC address by querying the read-only field factory_mac_address in the Settings.Secure database.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-20

Last Modified

2026-09-22

Generated

2026-10-10

AI Q&A

2026-09-20

EPSS Evaluated

2026-10-09

NVD

CVE-2026-86551

EUVD

EUVD-2026-83644

Affected Vendors & Products

Vendor	Product	Version / Range
ZTE	NX741J	GEN_ZTE_PQ85A01V1.0.0B23MR3 and all prior released versions

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-668	The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.

Attack-Flow Graph

Executive Summary

This vulnerability in the Z80Ultra (NX741J) product allows non-privileged programs to access the Wi-Fi MAC address by reading the factory_mac_address field in the Settings.Secure database. The MAC address is a unique identifier for network interfaces.

Detection Guidance

This vulnerability can be detected by checking if non-privileged programs can access the factory_mac_address field in the Settings.Secure database on devices running Z80Ultra (NX741J). No specific commands are provided in the context.

Impact Analysis

An attacker could exploit this to obtain the device's Wi-Fi MAC address without special permissions. While not directly causing data loss, this could aid in tracking or further network-based attacks if combined with other vulnerabilities.

Compliance Impact

This vulnerability allows non-privileged programs to access the Wi-Fi MAC address via a read-only field. While not directly violating GDPR or HIPAA, unauthorized access to device identifiers could potentially conflict with data protection principles under GDPR if linked to personal data. HIPAA compliance may not be directly impacted unless the MAC address is used in a healthcare context with protected health information.

Mitigation Strategies

Immediate mitigation steps include restricting access to the Settings.Secure database to prevent unauthorized retrieval of the Wi-Fi MAC address. Ensure only privileged applications can query the factory_mac_address field.

Hi! I’m here to help you understand CVE-2026-86551. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70