CVE-2026-49006 - TLS credential leakage vulnerability in ZTE F689 product

MEDIUM

TLS credential leakage vulnerability in ZTE F689 product

Published Aug 7, 2026

5.3

MEDIUM

CVSS 3.1

EPSS 0.25%

By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to TLS transmission.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

unaffected

Version	Status	Constraints
ZXHN F680V9.0.10P6N1,ZXHN F680V9.0.10P4N4,ZXHN F680V9.0.10P4N5,ZXHN F680V9.0.10P4N9,ZXHN F680V9.0.10P4N10,ZXHN F680V9.0.10P1N12,ZXHN F680V9.0.10P1N13	affected	-

No remediation recorded yet.

Weaknesses (1)

CWE-321

Link	Providers	Tags
https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/460175237240021109

No recorded changes yet.

Sources

Status PUBLISHED

Assigner zte

Published Aug 7, 2026

Updated Aug 7, 2026

Reserved May 27, 2026

Updated Aug 7, 2026

Status Deferred

Modified Aug 26, 2026

Severity n/a

Public date n/a