EUVD-2026-27883

Sensitive data exposure leading to admin/WLAN credential leak in ZTE ZXHN H298A 1.1 and H108N 2.6. A crafted request to the router web interface can expose sensitive device and account information. In affected builds, the response may include the administrator password and WLAN PSK, enabling...

CVE-2026-34474

The ZTE ZXHN H298A (v1.1) and H108N (v2.6) routers are vulnerable to an unauthenticated credential exposure vulnerability. A crafted HTTP GET request to the /getpage.lua?pid=1000&ETHCheat=1 endpoint causes the device to return sensitive information in the HTML response markup. This includes the l...