CVE-2026-44406 is a DLL hijacking vulnerability in ZTE's ZXCLOUD iRAI Cloud PC client uSmartView, specifically in the uSmartViewServiceAgent.exe process which runs with SYSTEM privileges. This uncontrolled search path element (CWE-427) allows a local attacker to place a malicious DLL that the service agent loads, resulting in local arbitrary code execution, privilege escalation, and memory corruption. The vulnerability affects version ZXCLOUD-iRAI-ClientV7.2X. The CVSS 3.1 vector indicates local attack vector with low complexity, no privileges required, no user interaction, scope changed, no confidentiality impact, low integrity impact, and high availability impact.

Successful exploitation enables a local attacker to execute arbitrary code with SYSTEM privileges, leading to privilege escalation and potential memory corruption. This can compromise system integrity and availability. There is no indication of confidentiality impact. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to trusted users only and monitor for suspicious DLL loading behavior related to uSmartViewServiceAgent.exe. Avoid running untrusted code on affected systems.