https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T18:07:16.605000+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-25649 CVE-2023-25649 — OS Command Injection Vulnerability in a Mobile Internet Product of ZTE 2026-10-16T18:07:16.622657+00:00

Affected: ZTE MF286R, zte mf286r_firmware

There is a command injection vulnerability in a mobile internet product of ZTE. Due to insufficient validation of SET_DEVICE_LED interface parameter, an authenticated attacker could use the vulnerability to execute arbitrary commands.