What is the CVSS score of CVE-2026-34472?

CVE-2026-34472 has a CVSS 3.1 base score of 7.1 (High). CVSS vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N. EPSS exploitation probability: 0.0%.

Is there a public PoC exploit available for CVE-2026-34472?

Yes, a public proof-of-concept exploit is available for CVE-2026-34472. Prioritise patching immediately. EPSS: 0.0%.

Zte CVE-2026-34472

EUVD-2026-17107 HIGH

Information Exposure (CWE-200)

2026-03-30 mitre

Information Disclosure Zte

7.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.1 HIGH

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

Low

Availability

None

Lifecycle Timeline

EUVD ID Assigned

Mar 30, 2026 - 16:00 euvd

EUVD-2026-17107

Analysis Generated

Mar 30, 2026 - 16:00 vuln.today

CVE Published

Mar 30, 2026 - 00:00 nvd

HIGH 7.1

DescriptionCVE.org

Unauthenticated credential disclosure in the wizard interface in ZTE ZXHN H188A V6.0.10P2_TE and V6.0.10P3N3_TE allows unauthenticated attackers on the local network to retrieve sensitive credentials from the router's web management interface, including the default administrator password, WLAN PSK, and PPPoE credentials. In some observed cases, configuration changes may also be performed without authentication.

AnalysisAI

Unauthenticated credential disclosure in ZTE ZXHN H188A routers (versions V6.0.10P2_TE and V6.0.10P3N3_TE) allows local network attackers to retrieve sensitive credentials including default administrator passwords, WLAN PSK, and PPPoE credentials via the wizard interface, with some cases enabling unauthenticated configuration changes. No CVSS or EPSS data is available, and KEV status is unconfirmed; however, a publicly available technical analysis exists on GitHub indicating detailed exploitation methodology.

Technical ContextAI

The vulnerability affects the web management wizard interface of ZTE ZXHN H188A residential broadband routers. The affected versions (V6.0.10P2_TE and V6.0.10P3N3_TE) contain an authentication bypass or inadequate access control mechanism in the wizard functionality that allows unauthenticated users on the local network to interact with the router's configuration interface. This is an information disclosure vulnerability with potential for unauthorized modification of router settings. The attack vector is network-based but limited to the local network (LAN) rather than remotely accessible over the internet, which constrains the attack surface to devices connected to the same network segment.

RemediationAI

Contact ZTE support or visit the ZTE global support portal (https://www.zte.com.cn/global/) to obtain a firmware update for the ZXHN H188A router. Confirm availability of patched firmware versions beyond V6.0.10P2_TE and V6.0.10P3N3_TE. As an interim mitigation, disable remote management of the router's web interface (if enabled), restrict access to the router's LAN subnet to authorized devices only, change default administrator credentials immediately after device provisioning, and implement network-level access controls (MAC filtering or VLAN isolation) to limit which devices can communicate with the router's management interface. The technical analysis available at https://gist.github.com/minanagehsalalma/7a8516b9b00d0008f2f25750320560c9 should be reviewed to understand the specific attack surface and apply targeted controls.