Ghostwire

CVE-2026-40001: There is a local privilege escalation vulnerability in the ZTE PROCESS Guard service of the cloud computer client, which...

MEDIUM CVSS 5.2

Published: May 6, 2026 | Last Modified: May 6, 2026

Description

There is a local privilege escalation vulnerability in the ZTE PROCESS Guard service of the cloud computer client, which may allow local arbitrary code execution, privilege escalation and path traversal bypass.

Ghostwire Analysis — What This Means Practically

Medium CVSS score indicates moderate risk — exploitation requires specific conditions or results in limited impact.

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Security Coverage (1 articles)

References

support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/1477954674427011121