Lucene search
K

CVE-2026-34472

🗓️ 30 Mar 2026 00:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 23 Views🌐 WEB

CVE-2026-34472: Unauthenticated disclosure in ZTE ZXHN H188A wizard leaks admin password, WLAN PSK, and PPPoE credentials.

Related
Detection
Refs
Paths
Social
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2026-34472
30 Mar 202600:00
attackerkb
Circl
CVE-2026-34472
27 Mar 202623:26
circl
CNNVD
ZTE ZXHN H188A 安全漏洞
30 Mar 202600:00
cnnvd
Cvelist
CVE-2026-34472
30 Mar 202600:00
cvelist
Exploit DB
ZTE ZXHN H188A V6 - Authentication Bypass
29 May 202600:00
exploitdb
EUVD
EUVD-2026-17107
30 Mar 202618:31
euvd
NVD
CVE-2026-34472
30 Mar 202616:16
nvd
Packet Storm
📄 ZTE ZXHN H188A 6 Authentication Bypass / Credential Disclosure
20 May 202600:00
packetstorm
Packet Storm
📄 ZTE ZXHN H188A V6 Authentication Bypass
26 May 202600:00
packetstorm
Positive Technologies
PT-2026-29045
30 Mar 202600:00
ptsecurity
Rows per page
NVD
Node
ztezxhn_h188a_firmwareMatch6.0.10p2_te
AND
Node
ztezxhn_h188a_firmwareMatch6.0.10p3n3_te
AND
ParameterPositionPathDescriptionCWE
_typepath/getPasswordUnauthenticated access to wizard endpoint(s) discloses WLAN PSK, SSID, and PPPoE credentials and can reveal default administrator password.CWE-306CWE-200
_tagpath/getPasswordUnauthenticated access to wizard endpoint(s) discloses WLAN PSK, SSID, and PPPoE credentials and can reveal default administrator password.CWE-306CWE-200
_typepath/wlan_getUnauthorized retrieval of wireless credentials via pre-login wizard handler.CWE-306CWE-200
_tagpath/wlan_getUnauthorized retrieval of wireless credentials via pre-login wizard handler.CWE-306CWE-200
_typepath/ppp_getUnauthorized PPPoE credential exposure through wizard interface prior to login.CWE-306CWE-200
_tagpath/ppp_getUnauthorized PPPoE credential exposure through wizard interface prior to login.CWE-306CWE-200

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

26 May 2026 07:16Current
5.9Medium risk
Vulners AI Score5.9
CVSS 3.17.1
EPSS0.00829
SSVC
23