CVE-2026-40002: Nubia-in Nx809j Firmware: hatalı yetki yönetimi

Açıklama (NVD)

Red Magic 11 Pro (NX809J) contains a vulnerability that allows non-privileged applications to trigger sensitive operations. The vulnerability stems from the lack of validation for applications accessing the service interface. Exploiting this vulnerability, an attacker can write files to specific partitions and set writable system properties.

Özet bilgiler

Ürün

Zte Nubia-in Nx809j Firmware

CVSS v3.1

8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS

%0,12 (yüzdelik 2)

CWE

CWE-269

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• support.zte.com.cn
• CWE-269