CVE-2026-49000 — HIGH (7.0)

Vulnerability Description

An insecure password scheme refers to vulnerabilities arising from improper selection of encryption algorithms, inadequate key management, or flawed code implementation, which may lead to data leakage or tampering, such as hard-coded keys or the use of weak encryption algorithms.

CVSS Score

7.0

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

LOW

Availability

LOW

Related Weaknesses (CWE)

CWE-310

References

https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/3711746568357

FAQ

What is CVE-2026-49000?

CVE-2026-49000 is a vulnerability with a CVSS score of 7.0 (HIGH). An insecure password scheme refers to vulnerabilities arising from improper selection of encryption algorithms, inadequate key management, or flawed code implementation, which may lead to data leakage...

How severe is CVE-2026-49000?

CVE-2026-49000 has been rated HIGH with a CVSS base score of 7.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-49000?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.