CVE-2026-40004 - Vulnerability Details - OpenCVE

ReportizFlow

There exists an openssl.cnf privilege escalation vulnerability in ZTE Cloud PC client uSmartview. An attacker can execute arbitrary code locally and escalate privileges.

No CVSS v4.0

Attack Vector Physical

Attack Complexity High

Privileges Required Low

Scope Changed

Confidentiality Impact High

Integrity Impact Low

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Zte	Zxcloud Irai

No data.

No data.

References

Link	Providers
https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/3126272076755775573

History

Thu, 07 May 2026 13:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Thu, 07 May 2026 05:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Zte Zte zxcloud Irai
Vendors & Products		Zte Zte zxcloud Irai

Thu, 07 May 2026 04:15:00 +0000

Type	Values Removed	Values Added
Description		There exists an openssl.cnf privilege escalation vulnerability in ZTE Cloud PC client uSmartview. An attacker can execute arbitrary code locally and escalate privileges.
Title		openssl.cnf Privilege Escalation Vulnerability in ZTE Cloud PC Client uSmartview
Weaknesses		CWE-427
References		https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/3126272076755775573
Metrics		cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N'}`

MITRE

Status: PUBLISHED

Assigner: zte

Published: 2026-05-07T03:47:06.297Z

Updated: 2026-05-07T12:41:25.248Z

Reserved: 2026-04-08T07:51:26.675Z

Link: CVE-2026-40004

Vulnrichment

Updated: 2026-05-07T12:41:17.934Z

NVD

Status : Awaiting Analysis

Published: 2026-05-07T04:16:23.073

Modified: 2026-05-07T14:56:04.523

Link: CVE-2026-40004

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-40004", "assignerOrgId": "6786b568-6808-4982-b61f-398b0d9679eb", "state": "PUBLISHED", "assignerShortName": "zte", "dateReserved": "2026-04-08T07:51:26.675Z", "datePublished": "2026-05-07T03:47:06.297Z", "dateUpdated": "2026-05-07T12:41:25.248Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "6786b568-6808-4982-b61f-398b0d9679eb", "shortName": "zte", "dateUpdated": "2026-05-07T03:47:06.297Z"}, "title": "openssl.cnf Privilege Escalation Vulnerability in ZTE Cloud PC Client uSmartview", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-427", "description": "CWE-427 Uncontrolled Search Path Element", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-38", "descriptions": [{"lang": "en", "value": "CAPEC-38 Leveraging/Manipulating Configuration File Search Paths"}]}], "affected": [{"vendor": "ZTE", "product": "ZXCLOUD iRAI", "versions": [{"status": "affected", "version": "ZXCLOUD-iRAI-ClientV7.2X"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "There exists an openssl.cnf privilege escalation vulnerability in ZTE Cloud PC client uSmartview. An attacker can execute arbitrary code locally and escalate privileges.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<div><div><div><div><div><div><div><div><div><div><div><div><div><div>There exists an openssl.cnf privilege escalation vulnerability in ZTE Cloud PC client uSmartview. An attacker can execute arbitrary code locally and escalate privileges.</div></div></div></div></div></div></div></div></div></div></div></div></div></div>"}]}], "references": [{"url": "https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/3126272076755775573"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "PHYSICAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "availabilityImpact": "NONE", "baseSeverity": "MEDIUM", "baseScore": 5.5, "vectorString": "CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N"}}], "credits": [{"lang": "en", "value": "Runzi Zhao, Feng Ye and Ziwei Wang", "type": "finder"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.2"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-07T12:40:43.739644Z", "id": "CVE-2026-40004", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-07T12:41:25.248Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-40004", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-07T12:40:43.739644Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-07T12:41:17.934Z"}}], "cna": {"title": "openssl.cnf Privilege Escalation Vulnerability in ZTE Cloud PC Client uSmartview", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Runzi Zhao, Feng Ye and Ziwei Wang"}], "impacts": [{"capecId": "CAPEC-38", "descriptions": [{"lang": "en", "value": "CAPEC-38 Leveraging/Manipulating Configuration File Search Paths"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "PHYSICAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "ZTE", "product": "ZXCLOUD iRAI", "versions": [{"status": "affected", "version": "ZXCLOUD-iRAI-ClientV7.2X"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/3126272076755775573"}], "x_generator": {"engine": "Vulnogram 1.0.2"}, "descriptions": [{"lang": "en", "value": "There exists an openssl.cnf privilege escalation vulnerability in ZTE Cloud PC client uSmartview. An attacker can execute arbitrary code locally and escalate privileges.", "supportingMedia": [{"type": "text/html", "value": "<div><div><div><div><div><div><div><div><div><div><div><div><div><div>There exists an openssl.cnf privilege escalation vulnerability in ZTE Cloud PC client uSmartview. An attacker can execute arbitrary code locally and escalate privileges.</div></div></div></div></div></div></div></div></div></div></div></div></div></div>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-427", "description": "CWE-427 Uncontrolled Search Path Element"}]}], "providerMetadata": {"orgId": "6786b568-6808-4982-b61f-398b0d9679eb", "shortName": "zte", "dateUpdated": "2026-05-07T03:47:06.297Z"}}}, "cveMetadata": {"cveId": "CVE-2026-40004", "state": "PUBLISHED", "dateUpdated": "2026-05-07T12:41:25.248Z", "dateReserved": "2026-04-08T07:51:26.675Z", "assignerOrgId": "6786b568-6808-4982-b61f-398b0d9679eb", "datePublished": "2026-05-07T03:47:06.297Z", "assignerShortName": "zte"}, "dataVersion": "5.2"}