CVE-2026-108502: Information disclosure vulnerability in ZTE Z80 Ultra product
Published Oct 10, 2026
·Updated
ZTE Z80 Ultra contains an information disclosure vulnerability, through which third-party applications can read relevant information by hooking system APIs.
Affected Software
1 affected component
ZTE Z80 Ultra
Event History
Oct 10, 2026
CVE Published
via MITRE·06:36 AM
Data Sourced
via MITRE·06:36 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access would an attacker need to exploit this issue?
Exploitation requires local access and user interaction. No privileges are required according to the provided CVSS vector.
2
Who is realistically exposed?
Users of the ZTE Z80 Ultra who install or interact with a third-party application that hooks system APIs may be exposed to disclosure of relevant information.
3
What is the security impact?
The issue is limited to information disclosure. The provided assessment indicates low confidentiality impact and no integrity or availability impact.