Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The ZTE ZXEDM iEMS product has a password reset vulnerability for any user.Because the management of the cloud EMS portal does not properly control access to the user list acquisition function, attackers can read all user list information through the user list interface. Attackers can reset the passwords of obtained user information, causing risks such as unauthorized operations.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-40436 The ZTE ZXEDM iEMS product has a password reset vulnerability for any user.Because the management of the cloud EMS portal does not properly control access to the user… https://www.cve.org/CVERecord?id=CVE-2026-40436
Post summary
CVE‑2026‑40436 identifies a password‑reset flaw in ZTE ZXEDM iEMS’s cloud EMS portal caused by inadequate user access controls.
CVE-2026-40436 Password Reset Vulnerability in ZTE ZXEDM iEMS Cloud EMS Portal https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-40436
Post summary
The note announces CVE-2026-40436 as a password‑reset vulnerability affecting the ZTE ZXEDM iEMS Cloud EMS Portal and provides only a brief description and a link to a vulnerability database, with no further exploitation, patch, or technical detail.
🚨 HIGH: CVE-2026-40436 (CVSS 7.1) - ZTE ZXEDM iEMS password reset vuln allows attackers to reset ANY user password via exposed user list API. Unauthorized access risk. Patch immediately. #CVE #Vulnerability #PatchNow #ThreatIntel https://t.co/gP9jkuAQT4
Post summary
The tweet reports CVE-2026-40436, a password‑reset flaw in ZTE ZXEDM iEMS that lets attackers change any user’s password via an exposed API, and urges immediate patching.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | zte | zxesm_iems | 16.25.42.04 | - | - |