CVE-2026-49006

Published Aug 7, 2026

Last updated 13 days ago

CVSS medium 5.3
Firmware

Overview

Description
By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to TLS transmission.
Source
psirt@zte.com.cn
NVD status
Received

Risk scores

CVSS 3.1

Type
Secondary
Base score
5.3
Impact score
3.6
Exploitability score
1.6
Vector string
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Severity
MEDIUM

Weaknesses

psirt@zte.com.cn
CWE-321

Social media

Hype score
Not currently trending

Related CVEs

  1. In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix firmware leak in async update The firmware object was not being released if validation failed. Use __free(firmware) to ensure the firmware is always released.•CVE-2026-72077
  2. Trezor Safe 3, Safe 5, and Safe 7 firmware contains a confirmation-binding flaw in the Ethereum sign_tx / sign_tx_eip1559 flow. For contract interactions, the device confirms only the initial calldata chunk while the signature commits to the full streamed calldata. An attacker could present calldata to a victim then supply a different tail that changes the signed transaction. Fixed in 70c9b0c.•CVE-2026-65058
  3. The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_42EA38 function of the file /goform/SetVirtualServerCfg.•CVE-2024-51313
  4. SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability•CVE-2026-15409
  5. SonicWall SMA1000 Appliances Code Injection Vulnerability•CVE-2026-15410

References

Sources include official advisories and independent security research.