CVE-2026-86556

MEDIUM 5.3

An information disclosure vulnerability in ZTE U30 Air product

CVSS Score

5.3

EPSS Score

0.0%

EPSS Percentile

0th

There is an information disclosure vulnerability in ZTE U30 Air. Due to improper permission control, attackers can exploit the vulnerability to obtain relevant information.

CWE	CWE-269
Vendor	zte
Product	u30 air
Published	Sep 30, 2026

Stay Ahead of the Next One

Get instant alerts for zte u30 air

Be the first to know when new medium vulnerabilities affecting zte u30 air are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Affected Versions

ZTE / U30 Air

U30AirV1.0.0B31 and earlier

References

NVD ↗ CVE.org ↗ EPSS Data ↗

support.zte.com.cn: https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/3351503523831148854

Credits

Sp4ce @ Geely 2030 Digital Security Lab