CVE-2026-34474

Sensitive data exposure leading to admin/WLAN credential leak in ZTE ZXHN H298A 1.1 and H108N 2.6. A crafted request to the router web interface can expose sensitive device and account information. In affected builds, the response may include the administrator password and WLAN PSK, enabling...

EUVD-2026-17107

Unauthenticated credential disclosure in the wizard interface in ZTE ZXHN H188A V6.0.10P2TE and V6.0.10P3N3TE allows unauthenticated attackers on the local network to retrieve sensitive credentials from the router's web management interface, including the default administrator password, WLAN PSK,...

CVE-2026-34472

The ZTE ZXHN H188A routers running firmware V6.0.10P2_TE and V6.0.10P3N3_TE are vulnerable to an authentication bypass and credential disclosure via the pre-login wizard interface. The root cause is that the router_logic_impl.lua file accepts attacker-controlled _type and _tag values directly for...