CVE-2024-22062: ZTE Zxcloud Irai

High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days.

There is a permissions and access control vulnerability in ZXCLOUD IRAI.An attacker can elevate non-administrator permissions to administrator permissions by modifying the configuration.

Affected products

• ZTE Zxcloud Irai: before 7.23.40 (fixed in 7.23.40)

Published 2024-07-09. Last modified 2026-06-17.