Yüksek CVSS 7.8
CVE-2026-44406: Zxcloud Irai: güvenlik açığı
Açıklama (NVD)
ZTE Cloud PC client uSmartView contains a DLL hijacking vulnerability; since uSmartViewServiceAgent.exe runs with SYSTEM privileges, successful hijacking enables local arbitrary code execution, privilege escalation, and memory corruption.contains a DLL hijacking vulnerability; since uSmartViewServiceAgent.exe runs with SYSTEM privileges, successful hijacking enables local arbitrary code execution, privilege escalation, and memory corruption.
Özet bilgiler
- Ürün
- Zte Zxcloud Irai
- CVSS v3.1
- 7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- %0,16 (yüzdelik 5)
- CWE
- CWE-427
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| zte-zxcloud-irai | 7.23.20 | — | 7.25.43 |