CVE-2026-49005 LOW

CVE-2026-49005: Root password hash exposure vulnerability in ZTE F689 product

Vendor Zte
Product F689
Weakness CWE-916
Published August 7, 2026
Last update August 7, 2026
View on NVD All CVEs

CVSS base score

2.4/10
Attack vector Physical
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

The root password hash of the device can be obtained through unencrypted information in the firmware.

Key dates

02Disclosure timeline

August 7, 2026 CVE published
August 7, 2026 Record updated