Threats tagged 'ghsa-3vhw-pg83-cf2w'

CVE-2026-49005 is a low-severity vulnerability in the ZTE F689 device where the root password hash can be extracted from unencrypted firmware data. The weakness involves the use of a password hash with insufficient computational effort, classified under CWE-916. This vulnerability does not have a known exploit in the wild and no official patch or remediation guidance has been provided by the vendor. The impact is limited to potential exposure of the root password hash, which could aid an attacker with physical or firmware access. No affected software versions are explicitly stated.