Zte Z80 Ultra
Monthly
Information disclosure in ZTE Z80 Ultra (nubia Z80 Ultra) smartphones allows a local app to reflectively invoke a system interface that lacks the necessary access-control check and read otherwise-protected information, with no integrity or availability impact. The vendor rates this CVE-2026-108501 at CVSS 5.7 (AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N), while the independent assessment treats it as a local, unauthenticated information-disclosure issue (CVSS 3.1 AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) that requires code execution on the device via an attacker-controlled app. No public exploit code or confirmed active exploitation was identified at time of analysis, and the issue is confined to the ZTE Z80 Ultra model.
Information disclosure in ZTE Z80 Ultra (nubia Z80 Ultra) smartphones allows a local app to reflectively invoke a system interface that lacks the necessary access-control check and read otherwise-protected information, with no integrity or availability impact. The vendor rates this CVE-2026-108501 at CVSS 5.7 (AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N), while the independent assessment treats it as a local, unauthenticated information-disclosure issue (CVSS 3.1 AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) that requires code execution on the device via an attacker-controlled app. No public exploit code or confirmed active exploitation was identified at time of analysis, and the issue is confined to the ZTE Z80 Ultra model.