7.8
CVE-2026-40004
- EPSS 0.01%
- Veröffentlicht 07.05.2026 04:16:23
- Zuletzt bearbeitet 13.05.2026 19:17:35
- Quelle psirt@zte.com.cn
- CVE-Watchlists
- Unerledigt
openssl.cnf Privilege Escalation Vulnerability in ZTE Cloud PC Client uSmartview
There exists an openssl.cnf privilege escalation vulnerability in ZTE Cloud PC client uSmartview. An attacker can execute arbitrary code locally and escalate privileges.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zte ≫ Zxcloud Irai Version >= 7.23.20 < 7.25.43
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.01% | 0.018 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| psirt@zte.com.cn | 5.5 | 0.3 | 4.7 |
CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N
|
CWE-427 Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.