CVE-2024-22062

Public technical details (affected products/versions/root cause/patches) for CVE-2024-22062 are not provided in the supplied documents. Monitor for updates from vendors and security bulletins.

CVE-2023-41780

CVE-2023-41780 involves an unsafe DLL loading vulnerability in ZTE ZXCLOUD iRAI . Connected sources indicate the root cause is the application’s inadequate input validation, enabling a local attacker to escalate privileges. The CNNVD entry specifies affected versions: 7.23.23 and earlier . No exp...

CVE-2023-41779

CVE-2023-41779 is an illegal memory access vulnerability in ZTE's ZXCLOUD iRAI. The issue can cause a physical machine to crash when exploited by an attacker with common user permissions via local access. Public entries attribute the affected versions to ZXCLOUD iRAI 7.23.21 and earlier (CNNVD no...

CVE-2023-41776

CVE-2023-41776 affects ZTE’s ZXCLOUD iRAI. The vulnerability is a local privilege escalation: attackers with regular user privileges can create a fake/process to escalate privileges. Several connected sources corroborate a local-privilege-escalation condition phrased as creating a fake process. P...

CVE-2021-21731

The CVE-2021-21731 issue is a CSRF vulnerability in the ZTE ZXCLOUD iRAI management page. The root cause is insufficient verification of request origins, allowing an attacker to submit malicious requests that can delete data on the affected device. Affected products/versions: ZXCLOUD iRAI prior t...

CVE-2023-41783

CVE-2023-41783 affects ZTE ZXCLOUD iRAI. Connected sources specify a command-injection flaw caused by inadequate input validation, enabling an attacker to escalate local privileges. CNNVD notes impact on version 7.22.11P2 and earlier; PT-Security lists affected versions but provides no fix inform...

CVE-2026-40004

Technical details about CVE-2026-40004 are not publicly provided in the supplied documents. No explicit affected products, versions, impact, or fixes are present here. Monitor for updates from vendors and security feeds for confirmation and remediation guidance.

CVE-2018-7365

CVE-2018-7365 affects ZTE uSmartView prior to and including v5.01.05. The root cause is an untrusted search path, which may allow an unauthorized user to perform unauthorized operations. Public documents provided do not specify exploit details or confirmed in-the-wild use. Depending on the source...

CVE-2023-41782

CVE-2023-41782 describes a DLL hijacking vulnerability in ZTE ZXCLOUD iRAI, where an attacker could place a fake DLL in a specific directory to execute malicious code. The provided documents do not specify affected versions, exact vulnerable components, root cause details, exploit vectors, or a c...

CVE-2023-25648

CVE-2023-25648 affects ZTE ZXCLOUD iRAI. The vulnerability is a weak folder permission issue that could let an ordinary-user attacker craft a fake DLL to run commands and escalate local privileges. The reports consistently describe local impact with high confidentiality/integrity/availability con...

CVE-2023-25650

CVE-2023-25650 affects ZTE ZXCLOUD iRAI, where the backend fails to escape special strings or restrict paths in the download interface, enabling an attacker with user permissions to modify a request parameter and trigger arbitrary file downloads. The vulnerability is rooted in improper input hand...

CVE-2026-44406

The CVE-2026-44406 affects ZTE Cloud PC client uSmartView. A DLL hijacking flaw targets the uSmartViewServiceAgent.exe running with SYSTEM privileges, enabling local arbitrary code execution, privilege escalation, and memory corruption. The available sources describe the vuln and its impact but d...

CVE-2026-44407

Public technical details (affected versions, root cause, mitigation/patch) are not provided in the supplied documents. Monitor official updates from ZTE and security advisories for new details.