CVE-2026-49004: CWE-89 Improper neutralization of special elements used in an SQL command ('SQL injection') in ZTE NX799J (Red Magic 11 Air)
The built-in PostgreSQL service on the mobile device suffers from misconfiguration flaws and command injection vulnerabilities. This service listens on a specific port, runs with root privileges, and is protected by weak credentials. The database supports the COPY FROM PROGRAM syntax, allowing local attackers to bypass Android's permission sandbox and gain full root access.
AI Analysis
Technical Summary
The PostgreSQL service embedded in the ZTE NX799J (Red Magic 11 Air) device is misconfigured and vulnerable to SQL injection (CWE-89). The service runs with root privileges and listens on a network port with weak authentication. The database's support for COPY FROM PROGRAM allows attackers with local access to execute arbitrary commands, effectively bypassing Android sandbox restrictions and escalating privileges to root.
Potential Impact
Successful exploitation allows a local attacker to gain full root access on the device by bypassing Android's permission sandbox. This compromises the device's security entirely, enabling arbitrary code execution with the highest privileges.
Mitigation Recommendations
A patch is available for this vulnerability. Since this is a cloud-hosted service managed by the vendor, remediation is typically handled server-side by ZTE. Users and administrators should consult the vendor advisory for patch deployment and confirm that the device firmware or software is updated to the fixed version.
CVE-2026-49004: CWE-89 Improper neutralization of special elements used in an SQL command ('SQL injection') in ZTE NX799J (Red Magic 11 Air)
Description
The built-in PostgreSQL service on the mobile device suffers from misconfiguration flaws and command injection vulnerabilities. This service listens on a specific port, runs with root privileges, and is protected by weak credentials. The database supports the COPY FROM PROGRAM syntax, allowing local attackers to bypass Android's permission sandbox and gain full root access.
CVSS v3.1
Score 6.5medium
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The PostgreSQL service embedded in the ZTE NX799J (Red Magic 11 Air) device is misconfigured and vulnerable to SQL injection (CWE-89). The service runs with root privileges and listens on a network port with weak authentication. The database's support for COPY FROM PROGRAM allows attackers with local access to execute arbitrary commands, effectively bypassing Android sandbox restrictions and escalating privileges to root.
Potential Impact
Successful exploitation allows a local attacker to gain full root access on the device by bypassing Android's permission sandbox. This compromises the device's security entirely, enabling arbitrary code execution with the highest privileges.
Mitigation Recommendations
A patch is available for this vulnerability. Since this is a cloud-hosted service managed by the vendor, remediation is typically handled server-side by ZTE. Users and administrators should consult the vendor advisory for patch deployment and confirm that the device firmware or software is updated to the fixed version.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- zte
- Date Reserved
- 2026-05-27T01:01:53.326Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
- Is Cloud Service
- true
Threat ID: 6a72d7b0bf8831d5395e8362
Added to database: 08/05/2026, 06:26:56 UTC
Last enriched: 08/05/2026, 06:41:05 UTC
Last updated: 08/05/2026, 15:28:15 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.