Exploit discussion active in current signal (2 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
Unauthenticated credential disclosure in the wizard interface in ZTE ZXHN H188A V6.0.10P2_TE and V6.0.10P3N3_TE allows unauthenticated attackers on the local network to retrieve sensitive credentials from the router's web management interface, including the default administrator password, WLAN PSK, and PPPoE credentials. In some observed cases, configuration changes may also be performed without authentication.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
3 versions affected across 2 products
| Date | Total | Labels |
|---|
| 2026-03-30 | 1 | General1 |
| 2026-05-08 | 1 | Disclosure1 |
| 2026-05-20 | 2 | PoC2 |
CVE-2026-34472: Pre-auth credential exposure and auth bypass in ZTE H188A V6 routers https://minanagehsalalma.github.io/cve-2026-34472-auth-bypass-zte-h188a-router/
Post summary
The text references CVE‑2026‑34472, noting credential exposure and authentication bypass on ZTE H188A V6 routers, and links to a resource that likely contains a Proof of Concept and technical details.
ZTE H188A auth bypass via leaked credentials - 2 yrs later assigned a 7.1 cvss https://minanagehsalalma.github.io/cve-2026-34472-auth-bypass-zte-h188a-router/ https://t.co/2dLrzWJs4o
Post summary
The tweet announces the ZTE H188A authentication bypass (CVE‑2026‑34472) and links to a write‑up that likely contains a proof‑of‑concept, but it does not report active exploitation, a patch, or detailed exploit code.
I went digging in ZTE ZXHN routers. Found 3 CVEs. Solo. No team. 🔴 CVE-2026-34472 — credential disclosure 🔴 CVE-2026-34473 — unauth DoS, 17 models hit 🔴 CVE-2026-34474 — admin + WLAN creds in plaintext Write-up coming soon. Open to vuln research / offsec roles. DMs open.
Post summary
The author announces the discovery of three CVEs in ZTE routers, describing credential exposure and a denial‑of‑service flaw, with a promise of a write‑up soon.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-34472 - ZTE ZXHN H188A Unauthenticated Credential Disclosure Vulnerability Intel Report: https://ift.tt/XpJ2jWc
Post summary
The alert mentions a CVE with a brief technical description but lacks details on PoC, exploitation, or mitigation steps.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | zte | zxhn_h188a | - | - | - |
| OS | zte | zxhn_h188a_firmware | 6.0.10p2_te | - | - |
| OS | zte | zxhn_h188a_firmware | 6.0.10p3n3_te | - | - |