MEDIUM
SQL injection vulnerability in ZTE SCP product
Published Aug 26, 2026
6.3
MEDIUMCVSS 3.1
EPSS 0.79%
Description
With legitimate user credentials in hand, attackers can construct malicious SQL statements to bypass authentication logic and execute arbitrary database queries directly. This will consequently lead to slow database queries and expanded query coverage. This vulnerability features a low exploitation threshold, wide scope of impact, requires no external privilege escalation, and is classified as a high-priority fix.
Affected products
-
- Version ZENIC-ONE-R20-SCP-V16.25.20.071StatusaffectedConstraints-
- Version
No data.
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (2)
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner zte
Published Aug 26, 2026
Updated Aug 26, 2026
Reserved May 27, 2026
Link CVE-2026-9668
CISA Vulnrichment
Updated Aug 26, 2026
ENISA EUVD
EUVD-2026-66341 Assigner zte
Published Aug 26, 2026
Updated Aug 26, 2026
Exploited since n/a
Link EUVD-2026-66341