CVE-2026-40004 MEDIUM

CVE-2026-40004: openssl.cnf Privilege Escalation Vulnerability in ZTE Cloud PC Client uSmartview

Vendor Zte
Product ZXCLOUD iRAI
Weakness CWE-427
Published May 7, 2026
Last update May 7, 2026
View on NVD All CVEs

CVSS base score

5.5/10
Attack vector Physical
Attack complexity High
Privileges required Low
User interaction Required
Confidentiality High
Integrity Low

CVSS vector

CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N

What the vulnerability does

01Description

There exists an openssl.cnf privilege escalation vulnerability in ZTE Cloud PC client uSmartview. An attacker can execute arbitrary code locally and escalate privileges.

Key dates

02Disclosure timeline

May 7, 2026 CVE published
May 7, 2026 Record updated