This vulnerability (CVE-2026-49000) in ZTE ZXUniPOS NDS-LTE is categorized under CWE-310, indicating cryptographic issues related to insecure password schemes. The problem arises from improper selection or implementation of encryption algorithms, inadequate key management, or hard-coded keys, which can compromise confidentiality and integrity of data. The CVSS 3.1 base score is 7.0 (High), reflecting network attack vector with high complexity, no privileges required, no user interaction, and impacts confidentiality (high), integrity (low), and availability (low). Affected versions are those prior to V24.40.40CP01 except for V24.30.40CP03 and V24.40.40CP01. No vendor advisory or patch information is currently available.

Successful exploitation could lead to unauthorized disclosure of sensitive information due to weak cryptographic protections, potentially allowing attackers to access or tamper with data. The impact on confidentiality is high, while integrity and availability impacts are low. There are no known active exploits reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No specific temporary mitigations are provided by the vendor at this time.