CVE-2026-49003: ZTE ZXDU68 s202 v5.0

Critical severity, CVSS 9.6. EPSS: 2.4% chance of exploitation in the next 30 days.

Attackers can exploit command injection vulnerabilities to delete core system runtime files, causing the monitoring module to crash and become paralyzed; simultaneously, they can obtain root privileges to steal configuration passwords such as SNMP, thereby tampering with critical system parameters and triggering abnormal operation of the entire power system.

Affected products

• ZTE ZXDU68 s202 v5.0

Published 2026-08-31. Last modified 2026-09-01.