CVE Explorer

CVE-2026-40436

The ZTE ZXEDM iEMS product has a password reset vulnerability for any user.Because the management of the cloud EMS portal does not properly control access to the user list acquisition function, attackers can read all user list information through the user list interface. Attackers can reset the passwords of obtained user information, causing risks such as unauthorized operations.

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:6480b7403fc6739f2989c8b0a82a62bba26d00e1622f60db790748c211790c5c

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Affected products and versions

1 source assertion

{"defaultStatus":"unaffected","product":"ZXEDM iEMS","vendor":"ZTE","versions":[{"status":"affected","version":"ElasticNet_UME_R32_V16.25.42.04"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:2d71650fb7b68159c656b26e306af1414a4a1ebfde4fb081810c7896b561f4b7 · sha256:4a711b4f04cb7b9f… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:2d71650fb7b68159c656b26e306af1414a4a1ebfde4fb081810c7896b561f4b7 · sha256:4a711b4f04cb7b9f… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

1 source assertion

{"description":"CWE‑269 Improper Privilege Management","lang":"en"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:2d71650fb7b68159c656b26e306af1414a4a1ebfde4fb081810c7896b561f4b7 · sha256:4a711b4f04cb7b9f… · /containers/cna/problemTypes/0/descriptions/0

Source references

1 source assertion

{"url":"https://support.zte.com.cn/zte-iccp-isupport-webui/support/bulletin/security?lang=en_US&t=0.7465962531829456"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:2d71650fb7b68159c656b26e306af1414a4a1ebfde4fb081810c7896b561f4b7 · sha256:4a711b4f04cb7b9f… · /containers/cna/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer