CVE-2026-108501: Unauthorized access vulnerability in ZTE Z80 Ultra product
Published Oct 10, 2026
·Updated
ZTE Z80 Ultra has a system interface permission verification defect. The interface lacks necessary access control, and relevant information can be read by reflectively invoking the interface.
Affected Software
1 affected component
ZTE Z80 Ultra
Event History
Oct 10, 2026
CVE Published
via MITRE·03:43 AM
Data Sourced
via MITRE·03:43 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The attack vector is adjacent network access. The attacker does not need prior privileges, but exploitation requires user interaction.
2
What is the security impact if exploitation succeeds?
An attacker may read relevant information through the affected interface. The reported impact is high confidentiality impact, with no integrity or availability impact indicated.