CVE-2026-40001: Local privilege escalation vulnerability in ZTE PROCESS Guard service of the cloud computer client
There is a local privilege escalation vulnerability in the ZTE PROCESS Guard service of the cloud computer client, which may allow local arbitrary code execution, privilege escalation and path traversal bypass.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-40001?
CVE-2026-40001 is classified as a high severity vulnerability due to its potential for local privilege escalation and arbitrary code execution.
How do I fix CVE-2026-40001?
To mitigate CVE-2026-40001, users should update to the latest version of the ZTE PROCESS Guard service as recommended by ZTE.
What systems are affected by CVE-2026-40001?
CVE-2026-40001 affects the ZTE PROCESS Guard service within the Cloud Computer Client.
Can CVE-2026-40001 lead to remote attacks?
No, CVE-2026-40001 is a local privilege escalation vulnerability and requires local access to the system to exploit.
What are the potential impacts of CVE-2026-40001?
Exploitation of CVE-2026-40001 can result in arbitrary code execution and unauthorized access to system privileges.