CVE-2026-34474: Infoleak
Sensitive data exposure leading to admin/WLAN credential leak in ZTE ZXHN H298A 1.1 and H108N 2.6. A crafted request to the router web interface can expose sensitive device and account information. In affected builds, the response may include the administrator password and WLAN PSK, enabling authentication bypass and network compromise. Some firmware versions may expose only partial identifiers (e.g., serial number, ESSID, MAC addresses).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-34474?
CVE-2026-34474 is considered a high severity vulnerability due to the potential exposure of sensitive credentials.
How do I fix CVE-2026-34474?
To fix CVE-2026-34474, upgrade to a non-affected version of the ZTE ZXHN H298A or H108N firmware.
What are the affected devices listed in CVE-2026-34474?
The affected devices in CVE-2026-34474 are the ZTE ZXHN H298A version 1.1 and ZTE ZXHN H108N version 2.6.
What potential impact does CVE-2026-34474 have on users?
CVE-2026-34474 may allow attackers to retrieve sensitive administrator and WLAN credentials, compromising device security.
Where can I find more information about CVE-2026-34474?
For more information about CVE-2026-34474, refer to the official documentation provided by ZTE.