Back

MEDIUM

SQL injection vulnerability in ZTE SCP product

Published Aug 26, 2026

Description

With legitimate user credentials in hand, attackers can construct malicious SQL statements to bypass authentication logic and execute arbitrary database queries directly. This will consequently lead to slow database queries and expanded query coverage. This vulnerability features a low exploitation threshold, wide scope of impact, requires no external privilege escalation, and is classified as a high-priority fix.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner zte
Published Aug 26, 2026
Updated Aug 26, 2026
Reserved May 27, 2026
CISA Vulnrichment
Updated Aug 26, 2026
NVD
Status Deferred
Modified Aug 26, 2026
Red Hat
Severity n/a
Public date n/a
ENISA EUVD
Assigner zte
Published Aug 26, 2026
Updated Aug 26, 2026
Exploited since n/a
EUVD-2026-66341