CVE-2026-34472

Name: CVE-2026-34472
Creator: NVD / NIST
Published: 2026-03-30T16:16:07.703+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

HIGHCVSS 7.1/10EPSS 8.94%

Last modified Jun 17, 2026

CVE-2026-34472 is a high-severity vulnerability rated 7.1/10 on the CVSS scale. Unauthenticated credential disclosure in the wizard interface in ZTE ZXHN H188A V6.0.10P2_TE and V6.0.10P3N3_TE allows unauthenticated attackers on the local network to retrieve sensitive credentials from the router's web management interface, including the default administrator password, WLAN PSK, and PPPoE credentials. In some observed cases, configuration changes may also be performed without authentication.. EPSS estimates a 8.94% chance of exploitation in the next 30 days.

Description

Unauthenticated credential disclosure in the wizard interface in ZTE ZXHN H188A V6.0.10P2_TE and V6.0.10P3N3_TE allows unauthenticated attackers on the local network to retrieve sensitive credentials from the router's web management interface, including the default administrator password, WLAN PSK, and PPPoE credentials. In some observed cases, configuration changes may also be performed without authentication.

Metrics

CVSS 3.1

7.1/10

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

EPSS Probability

8.94%

94.6th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Vendor	Product	Versions
Zte	Zxhn H188a Firmware	6.0.10p2_te
Zte	Zxhn H188a Firmware	6.0.10p3n3_te

References

https://gist.github.com/minanagehsalalma/7a8516b9b00d0008f2f25750320560c9Third Party Advisory
https://www.zte.com.cn/global/Product
http://seclists.org/fulldisclosure/2026/May/19

Timeline

Published: Mar 30, 2026
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2026-34472?

How severe is CVE-2026-34472?

CVE-2026-34472 has a CVSS score of 7.1/10 (HIGH severity). The EPSS model estimates a 8.94% probability of exploitation in the next 30 days.

How do I fix CVE-2026-34472?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2026-34472?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST