ZTE Zxcdn vulnerabilities

2 CVEs affecting ZTE Zxcdn, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-46581, published 2025-10-14.

More from ZTE.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-46581, published 2025-10-14. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. ZTE's ZXCDN product is affected by a Struts remote code execution (RCE) vulnerability. An unauthenticated attacker can remotely execute commands with non-root privileges.
• CVE-2021-21733, published 2021-05-19. Medium severity, CVSS 4.9. EPSS: 0.8% chance of exploitation in the next 30 days. The management system of ZXCDN is impacted by the information leak vulnerability. Attackers can make further analysis according to the information returned by the program, and then obtain some…