CVE-2026-40002Medium· 5.0▾ SunlitRed Magic 11 Pro (NX809J) contains a vulnerability that allows non-privileged applications to trigger sensitive operations. The vulnerability stems from the lack of validation for applications accessing the service interface. Exploiting …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 27.5 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 29.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.1%
0.1% → 0.1%
Red Magic 11 Pro (NX809J) contains a vulnerability that allows non-privileged applications to trigger sensitive operations. The vulnerability stems from the lack of validation for applications accessing the service interface. Exploiting this vulnerability, an attacker can write files to specific partitions and set writable system properties.
nubia-in_nx809j_firmware < GEN_NEEA_NX809JV1.0.0B16MR1Upgrade past the affected range:
nubia-in_nx809j_firmware GEN_NEEA_NX809JV1.0.0B16MR1Connected by shared product, vendor, weakness, or advisory.
CVE-2026-108506Medium· 5.5ZTE Z80 Ultra's system interfaces do not have robust invocation authentication, with inadequate access control
CVE-2026-108505Low· 3.3ZTE Z80 Ultra has a local information disclosure vulnerability
CVE-2026-108504Medium· 5.5ZTE Z80 Ultra has an unauthorized information disclosure vulnerability
CVE-2026-108502Low· 3.3ZTE Z80 Ultra contains an information disclosure vulnerability, through which third-party applications can read relevant information by hooking system APIs.
CVE-2026-108501Medium· 5.7ZTE Z80 Ultra has a system interface permission verification defect
CVE-2026-86556Medium· 5.3There is an information disclosure vulnerability in ZTE U30 Air