How many CVEs does ZTE have?

ZTE has 228 published CVE records since 2012, including 59 in the last two years.

How many ZTE CVEs are in CISA KEV?

None of ZTE's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which ZTE products have the most CVEs?

The ZTE products with the most published CVEs are ZXCLOUD iRAI, GoldenDB, zxv10 w300, zxhn_h168n_firmware, zxv10 w300 firmware.

What are the most common weakness types in ZTE CVEs?

ZTE's CVEs most often map to these CWE weakness types: CWE-269 (Improper Privilege Management), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-20 (Improper Input Validation).

Are there public exploits for ZTE vulnerabilities?

Yes — 33 of ZTE's CVEs have a known public exploit.

How many critical ZTE vulnerabilities are there?

ZTE has 34 critical and 88 high-severity CVEs.

What is the average severity of ZTE CVEs?

The average CVSS base score across ZTE's scored CVEs is 7.0.

RadicalNotion.AI

Log in Create an account

228 CVEs

ZTE Vulnerabilities

Name: ZTE vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for ZTE.

228

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

33

Public exploits

PoC or exploit code

7.0

Avg CVSS

2012–2026

Overview

ZTE has 228 published CVE records since 2012, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 33 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.

Security scorecard

A quick read on ZTE's vulnerability posture, as a share of its 228 published CVEs.

Average CVSS: 7.0
Critical / high: 54%
Actively exploited (KEV): 0%
Public exploit available: 14%
Patch available: 34%

Severity and exploitation

How the CVSS severity of ZTE's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical34

High88

Medium93

Low13

In CISA’s Known Exploited Vulnerabilities catalog

0

None of ZTE's CVEs are currently listed in CISA's KEV catalog.

Public exploits

33

33 of ZTE's CVEs have a known public exploit available.

Most affected products

The ZTE products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in ZTE CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish ZTE CVE records.

Disclosure activity by year

How many ZTE CVEs were published each year.

2019

23

2020

22

2021

30

2022

14

2023

14

2024

22

2025

21

2026

38

Latest ZTE CVEs

The most recently disclosed vulnerabilities affecting ZTE.

Unauthorized access vulnerability in ZTE Z80 Ultra product
CWE-269
Medium · CVSS 5.5
EPSS 0.1%2026-10-10
Information disclosure vulnerability in ZTE Z80 Ultra product
CWE-269
Low · CVSS 3.3
EPSS 0.1%2026-10-10
Unauthorized information retrieval vulnerability in ZTE Z80 Ultra product
CWE-269
Medium · CVSS 5.5
EPSS 0.1%2026-10-10
Unauthorized information acquisition vulnerability in ZTE Z80 Ultra product
CWE-276
Low · CVSS 3.3
EPSS 0.1%2026-10-10
Information disclosure vulnerability in ZTE Z80 Ultra product
CWE-269
Low · CVSS 3.3
EPSS 0.1%2026-10-10
Unauthorized access vulnerability in ZTE Z80 Ultra product
CWE-269
Medium · CVSS 5.7
EPSS 0.2%2026-10-10
An information disclosure vulnerability in ZTE U30 Air product
CWE-269
Medium · CVSS 5.3
EPSS 0.2%2026-09-30
Hardcoded Key Vulnerability in ZTE SmartLife APP
CWE-798
Medium · CVSS 6.2
EPSS 0.2%2026-09-20
Email enumeration and account ID leakage vulnerabilities in ZTE SmartLife APP
CWE-269
Medium · CVSS 4.3
EPSS 0.3%2026-09-20
A password reset vulnerability in ZTE SmartLife APP
CWE-269
High · CVSS 8.8
EPSS 0.5%2026-09-20
A vulnerability that skips email ownership verification for account registration in ZTE SmartLife APP
CWE-269
Medium · CVSS 5.4
EPSS 0.4%2026-09-20
Wi-Fi MAC Address Obtainment by Non-privileged Program Vulnerability in ZTE Z80Ultra (NX741J) product
CWE-668
Low · CVSS 3.3
EPSS 0.2%2026-09-20

Get an alert for each new ZTE CVE, with AI-written analysis and remediation steps.

Monitor ZTE CVEs

Other vendors

CVE counts for other vendors.

H3C234 CVEs PostgreSQL233 CVEs Concrete CMS230 CVEs getgrav228 CVEs WAVLINK228 CVEs Bentley Systems227 CVEs Delta Electronics226 CVEs chakra-core225 CVEs

Browse all vendors

Frequently asked questions

Common questions about ZTE vulnerabilities.

How many CVEs does ZTE have?: ZTE has 228 published CVE records since 2012, including 59 in the last two years.
How many ZTE CVEs are in CISA KEV?: None of ZTE's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which ZTE products have the most CVEs?: The ZTE products with the most published CVEs are ZXCLOUD iRAI, GoldenDB, zxv10 w300, zxhn_h168n_firmware, zxv10 w300 firmware.
What are the most common weakness types in ZTE CVEs?: ZTE's CVEs most often map to these CWE weakness types: CWE-269 (Improper Privilege Management), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-20 (Improper Input Validation).
Are there public exploits for ZTE vulnerabilities?: Yes — 33 of ZTE's CVEs have a known public exploit.
How many critical ZTE vulnerabilities are there?: ZTE has 34 critical and 88 high-severity CVEs.
What is the average severity of ZTE CVEs?: The average CVSS base score across ZTE's scored CVEs is 7.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track ZTE vulnerabilities

Get an alert for each new ZTE CVE, with AI-written analysis and remediation steps.

Create an account See pricing