CVE-2026-44406 is a DLL hijacking vulnerability in the ZTE ZXCLOUD iRAI client software, specifically in the uSmartViewServiceAgent.exe component that runs with SYSTEM privileges. This uncontrolled search path element weakness (CWE-427) allows a local attacker to place a malicious DLL in a location that the service agent loads, resulting in arbitrary code execution with elevated privileges and potential memory corruption. The vulnerability affects version ZXCLOUD-iRAI-ClientV7.2X. The CVSS 3.1 vector indicates local attack vector, low complexity, no privileges required, no user interaction, with impact on integrity and availability but not confidentiality.

Successful exploitation enables local attackers to execute arbitrary code with SYSTEM-level privileges, leading to privilege escalation and possible memory corruption. This could compromise system integrity and availability. Confidentiality impact is not indicated. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to trusted users only and monitor for suspicious activity related to DLL loading in the affected client. Avoid running the vulnerable client on systems where local users are not fully trusted.