High severity · published Apr 13, 2026
CVE-2026-40436
ZTE ZXEDM iEMS product has a password reset vulnerability
7.5
CVSS
0.2%
EPSS
No
On KEV
Description
The ZTE ZXEDM iEMS product has a password reset vulnerability for any user.Because the management of the cloud EMS portal does not properly control access to the user list acquisition function, attackers can read all user list information through the user list interface. Attackers can reset the passwords of obtained user information, causing risks such as unauthorized operations.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 9% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ZI
ZXEDM iEMS · ZTE
ElasticNet_UME_R32_V16.25.42.04 · source: vendor
ZI
Zxesm Iems · Zte
16.25.42.04 · source: NVD