CVE-2026-40004

MEDIUM CVSS 5.5 View on NVD ↗

Description

There exists an openssl.cnf privilege escalation vulnerability in ZTE Cloud PC client uSmartview. An attacker can execute arbitrary code locally and escalate privileges.

CVSS Vector

CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N

References

https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/3126272076755775573

Published: May 07, 2026 04:16 UTC Modified: May 07, 2026 14:56 UTC