CVE-2026-49003: CWE-287 Improper Authentication in ZTE ZXDU68 S202 V5.0
Description
CVE-2026-49003 is a critical improper authentication vulnerability in ZTE ZXDU68 S202 V5.0. Attackers exploiting this flaw can perform command injection to delete core system runtime files, causing the monitoring module to crash. They can also gain root privileges to steal configuration passwords such as SNMP, tamper with critical system parameters, and disrupt the operation of the entire power system.
CVSS v3.1
Score 9.6critical
Affected software
ZTE
ZXDU68 S202 V5.0
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CWE-287) in ZTE ZXDU68 S202 V5.0 allows attackers to bypass authentication controls and execute command injection attacks. Successful exploitation leads to deletion of core runtime files, paralysis of the monitoring module, and escalation to root privileges. With root access, attackers can steal sensitive configuration data like SNMP passwords and manipulate system parameters, potentially causing abnormal behavior in the power system infrastructure.
Potential Impact
Exploitation results in high confidentiality, integrity, and availability impacts: attackers can obtain root privileges, steal sensitive passwords, disrupt monitoring functionality, and cause abnormal operation of critical power system components. This poses a severe risk to system stability and security.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been documented at this time.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- zte
- Date Reserved
- 2026-05-27T01:01:53.326Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6a954eeaacd9273b49e4bfe6
Added to database: 08/31/2026, 09:52:42 UTC
Last enriched: 09/08/2026, 00:37:27 UTC
Last updated: 10/13/2026, 18:48:21 UTC
Views: 91
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.