CVE-2026-86556: An information disclosure vulnerability in ZTE U30 Air product
Published Sep 30, 2026
·Updated
There is an information disclosure vulnerability in ZTE U30 Air. Due to improper permission control, attackers can exploit the vulnerability to obtain relevant information.
Affected Software
1 affected component
ZTE U30 Air
Event History
Sep 30, 2026
CVE Published
via MITRE·02:14 AM
Data Sourced
via MITRE·02:14 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The vulnerability is network-accessible and requires no privileges or user interaction, so an unauthenticated attacker who can reach an affected ZTE U30 Air interface may be able to exploit it.
2
What is the expected impact?
Successful exploitation can disclose relevant information. The available data indicates low confidentiality impact and no integrity or availability impact.