CVE-2026-44406: ZTE Zxcloud Irai

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

ZTE Cloud PC client uSmartView contains a DLL hijacking vulnerability; since uSmartViewServiceAgent.exe runs with SYSTEM privileges, successful hijacking enables local arbitrary code execution, privilege escalation, and memory corruption.contains a DLL hijacking vulnerability; since uSmartViewServiceAgent.exe runs with SYSTEM privileges, successful hijacking enables local arbitrary code execution, privilege escalation, and memory corruption.

Affected products

• ZTE Zxcloud Irai: from 7.23.20, before 7.25.43 (fixed in 7.25.43)

Published 2026-05-07. Last modified 2026-06-17.