CVE-2021-21731: ZTE Zxcloud Irai

High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days.

A CSRF vulnerability exists in the management page of a ZTE product.The vulnerability is caused because the management page does not fully verify whether the request comes from a trusted user. The attacker could submit a malicious request to the affected device to delete the data. This affects: ZXCLOUD iRAI All versions up to KVM-ProductV6.03.04

Affected products

• ZTE Zxcloud Irai: before 6.03.04 (fixed in 6.03.04)

Published 2021-04-13. Last modified 2026-06-17.