The ZTE ZXHN H298A (version 1.1) and ZXHN H108N (version 2.6) devices are affected by an unauthenticated credential exposure vulnerability. This issue allows attackers to retrieve credential information without requiring authentication, potentially compromising device security. There is no vendor advisory or patch information provided, and no known exploits have been documented in the wild.

Exposure of credentials without authentication could allow unauthorized access to device management interfaces or services, potentially leading to further compromise. However, no active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict network access to affected devices and monitor for unauthorized access attempts.