ZTE UACLogin Cross-Site Request Forgery Vulnerability

Vulnerability

A cross-site request forgery (CSRF) vulnerability has been identified in ZTE UACLogin. This vulnerability allows attackers to exploit a user's authenticated session, forging cross-site requests that execute unintended operations, such as tampering with configuration data.

Impact

Exploitation of this vulnerability could lead to unauthorized actions being performed on behalf of the user, potentially allowing attackers to modify configuration settings or other critical data.

Added: May 27, 2026, 8:24 AM
Updated: May 27, 2026, 8:24 AM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
0.6
exploitability
6.2
remediation
0.0
relevance
9.7
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.