CVE-2026-86551: ZTE NX741J

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

The Z80Ultra (NX741J) product contains a vulnerability where non-privileged programs can retrieve the Wi-Fi MAC address by querying the read-only field factory_mac_address in the Settings.Secure database.

Affected products

• ZTE NX741J

Published 2026-09-20. Last modified 2026-09-22.