https://reddit.com/r/cybersecurity/comments/1tilva5/cve202634472_according_to_zte_an_unauthenticated/: CVE-2026-34472: According to ZTE, an unauthenticated auth bypass is just a 'customer-specific low-risk requirement.' MITRE disagreed.

Published May 20, 2026

Updated

Affected Software

1 affected component

ZTE H188A V6

CVE-2026-34472 is considered a significant vulnerability due to its potential to expose sensitive configuration data.

To fix CVE-2026-34472, apply the latest firmware update provided by ZTE for the H188A V6 device.

CVE-2026-34472 is an unauthenticated authentication bypass vulnerability.

CVE-2026-34472 exposes sensitive configuration data, including Wi-Fi and admin-related credentials.

CVE-2026-34472 was reported following a thorough analysis of the ZTE H188A V6 device's routing flaw.