CVE-2026-44410 | THREATINT

Description

This vulnerability stems from a business logic flaw.Attackers can exploit legitimate application functions in unintended and abnormal ways, deviating from the designer’s expectations, to carry out malicious attacks.

PUBLISHED Reserved 2026-05-06 | Published 2026-05-26 | Updated 2026-05-26 | Assigner zte

LOW: 3.8CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L

Problem types

CWE-1240 Use of a cryptographic primitive with a risky implementation

Product status

Default status
unaffected

V24.40.40
affected

V24.30.40CP02
affected

Credits

Venom Nguyen finder

References

support.zte.com.cn/…ui/bulletin/detail/3711746568357343383

cve.org (CVE-2026-44410)

nvd.nist.gov (CVE-2026-44410)

Download JSON