CVE Daily

CVE-2025-26709

There is an unauthorized access vulnerability in ZTE F50. Due to improper permis...

Medium CVSS 5.7

Overview

There is an unauthorized access vulnerability in ZTE F50. Due to improper permission control of the Web module interface, an unauthorized attacker can obtain sensitive information through the interface

CWE: CWE-200 Published: 2025-08-15T11:15:28.720
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 5.7 (MEDIUM)
  • Detected tags: unauth_access (tag impact: HIGH)

Recommended actions:

  • Enforce authentication/authorization; reduce default endpoint exposure.

Recommended tools

Tags