---
cve: "CVE-2026-44409"
severity: "MEDIUM"
cvss: 5.7
epss: "0.2%"
vendor: "ZTE"
kev: false
exploited: false
published: "2026-05-22 05:16:26"
tags: [cve, security, medium]
source: tsecurity.de CVE-Dossier
exported: "2026-09-21T10:48:39+02:00"
---

# CVE-2026-44409

> 5.7 MEDIUM

## Beschreibung

There is an an information disclosure vulnerability in ZTE MU5250. Due to improper configuration of the access control mechanism, attackers can obtain information without authorization, causing the risk of information disclosure.

## CVSS-Vektor

```
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Benachbart | warn |
| AC Komplexität | Gering | bad |
| PR Privilegien | Gering | warn |
| UI Interaktion | Keine | bad |
| S Scope | Unverändert | good |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Keine | good |
| A Verfügbarkeit | Keine | good |

## Referenzen

- <https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/3711746568357343342>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2026-44409) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_