CVE-2026-49006 MEDIUM

CVE-2026-49006: TLS credential leakage vulnerability in ZTE F689 product

Vendor Zte
Product F689
Weakness CWE-321
Published August 7, 2026
Last update August 7, 2026
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Adjacent
Attack complexity High
Privileges required None
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to TLS transmission.

Key dates

02Disclosure timeline

August 7, 2026 CVE published
August 7, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2023-3947 Video Conferencing with Zoom <= 4.2.1 - Sensitive Information Exposure CVE-2025-12177 Download Manager <= 3.3.30 - Unauthenticated Cron Trigger due to Hardcoded Cron Key CVE-2025-8625 Copypress Rest API 1.1 - 1.2 - Missing Configurable JWT Secret and File-Type Validation to Unauthenticated Remote Code Execution CVE-2024-13773 Civi - Job Board & Freelance Marketplace WordPress Theme <= 2.1.4 - Sensitive Information Exposure CVE-2023-3371 EmbedPress <= 3.7.3 - Sensitive Information Exposure