CVE-2026-49000: Cryptography Implementation Flaw vulnerability in ZTE ZXUniPOS NDS-LTE product
An insecure password scheme refers to vulnerabilities arising from improper selection of encryption algorithms, inadequate key management, or flawed code implementation, which may lead to data leakage or tampering, such as hard-coded keys or the use of weak encryption algorithms.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-49000?
The severity of CVE-2026-49000 is rated as medium with a score of 5.3.
What type of vulnerability is CVE-2026-49000?
CVE-2026-49000 is a cryptography implementation flaw vulnerability affecting the ZTE ZXUniPOS NDS-LTE product.
How does CVE-2026-49000 impact data security?
CVE-2026-49000 can lead to data leakage or tampering due to an insecure password scheme and weak encryption algorithms.
How do I fix the vulnerability described in CVE-2026-49000?
To fix CVE-2026-49000, you should update to the latest version of ZTE ZXUniPOS NDS-LTE that addresses the cryptography implementation flaws.
What is the potential risk level associated with CVE-2026-49000?
CVE-2026-49000 has a risk level of 41, which indicates it poses a significant threat to data confidentiality and integrity.