ZTE f689 vulnerabilities

4 CVEs affecting ZTE f689, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-49008, published 2026-08-07.

More from ZTE.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-49007, published 2026-08-07. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. By accessing unencrypted information in the device firmware, an attacker can obtain the initial login credentials for the device's web interface.
• CVE-2026-49008, published 2026-08-07. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to the integrity verification of a specific application function on the device.
• CVE-2026-49006, published 2026-08-07. Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days. By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to TLS transmission.
• CVE-2026-49005, published 2026-08-07. Low severity, CVSS 2.4. EPSS: 0.2% chance of exploitation in the next 30 days. The root password hash of the device can be obtained through unencrypted information in the firmware.