5.5
/ 10
MEDIUM
CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N
Description
There exists an openssl.cnf privilege escalation vulnerability in ZTE Cloud PC client uSmartview. An attacker can execute arbitrary code locally and escalate privileges.
Basic Information
ID
CVE-2026-40004
Source
zte
Published
May 7, 2026 at 03:47
Affected Product
Vendor
ZTE
Product
ZXCLOUD iRAI
Version
ZXCLOUD-iRAI-ClientV7.2X
Affected Versions
ZTE ZXCLOUD iRAI ZXCLOUD-iRAI-ClientV7.2X