CVE-2026-86556: ZTE u30 Air

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

There is an information disclosure vulnerability in ZTE U30 Air. Due to improper permission control, attackers can exploit the vulnerability to obtain relevant information.

Affected products

• ZTE u30 Air: up to and including U30AirV1.0.0B31

Published 2026-09-30. Last modified 2026-09-30.