Advisories · Technology

ZTE ZXUniPOS NDS-LTE.

Every CVE that names ZTE ZXUniPOS NDS-LTE among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-49002 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Broken Access Control Vulnerabily in ZTE ZXUniPOS NDS-LTE product
- ZTE ZXUniPOS NDS-LTE
- Broken access control
Not analysed yet 27 May 2026
CVE-2026-49001 CVE record

CVSS 5.3 Medium

Cross-Site Request Forgery (CSRF) vulnerability in ZTE ZXUniPOS NDS-LTE product
- ZTE ZXUniPOS NDS-LTE
- Cross-site request forgery (CSRF)
Not analysed yet 27 May 2026
CVE-2026-49000 CVE record

CVSS 7.0 High

Cryptography Implementation Flaw vulnerability in ZTE ZXUniPOS NDS-LTE product
- ZTE ZXUniPOS NDS-LTE
- CWE-310
Not analysed yet 27 May 2026
CVE-2026-48999 CVE record

CVSS 5.7 Medium

Stored Cross-Site Scripting (XSS) vulnerability in ZTE ZXUniPOS NDS-LTE product
- ZTE ZXUniPOS NDS-LTE
- Cross-site scripting (XSS)
Not analysed yet 27 May 2026
CVE-2026-44410 CVE record

CVSS 3.8 Low

Function Abusement Vulnerability in ZTE ZXUniPOS NDS-LTE
- ZTE ZXUniPOS NDS-LTE
- CWE-1240
Not analysed yet 26 May 2026