Critical severity9.1NVD Advisory· Published May 27, 2026· Updated Jun 17, 2026

CVE-2026-49002

Description

Access control failure means that an application does not effectively check user access permissions, so that unauthorized users can access system data beyond their permissions, such as viewing and modifying configuration information.

Affected products

Zte/zte-iccp-isupport-webuillm-fuzzy

Patches

Vulnerability mechanics

References

support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/6783201397271515377nvd

News mentions

No linked articles in our index yet.

cvss	0.591
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000