VulnSea

z80_ultra vulnerabilities

CVEs whose affected-version data names the z80_ultra package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

6 CVEsRSS

CVE-2026-108506Medium· 5.5
2w ago

ZTE Z80 Ultra's system interfaces do not have robust invocation authentication, with inadequate access control

ZTE Z80 Ultra's system interfaces do not have robust invocation authentication, with inadequate access control. Third-party apps may call the interfaces through reflection and retrieve relevant information.

▾ SunlitZTE · Z80 UltraEPSS 0.14%via NVD
CVE-2026-108505Low· 3.3
2w ago

ZTE Z80 Ultra has a local information disclosure vulnerability

ZTE Z80 Ultra has a local information disclosure vulnerability. Third-party applications can capture data returned by system interfaces to obtain device-related information.

▾ SunlitZTE · Z80 UltraEPSS 0.11%via NVD
CVE-2026-108504Medium· 5.5
2w ago

ZTE Z80 Ultra has an unauthorized information disclosure vulnerability

ZTE Z80 Ultra has an unauthorized information disclosure vulnerability. The access control for methods within the framework is insufficient. An attacker can exploit this method to read device-related information.

▾ SunlitZTE · Z80 UltraEPSS 0.12%via NVD
CVE-2026-108503Low· 3.3
2w ago

ZTE Z80 Ultra has an interface permission validation vulnerability

ZTE Z80 Ultra has an interface permission validation vulnerability. The callable functions provided by the system lack sufficient access control. An attacker can leverage these functions to read relevant information.

▾ SunlitZTE · Z80 UltraEPSS 0.13%via NVD
CVE-2026-108502Low· 3.3
2w ago

ZTE Z80 Ultra contains an information disclosure vulnerability, through which third-party applications can read relevant information by hooking system APIs.

ZTE Z80 Ultra contains an information disclosure vulnerability, through which third-party applications can read relevant information by hooking system APIs.

▾ SunlitZTE · Z80 UltraEPSS 0.13%via NVD
CVE-2026-108501Medium· 5.7
2w ago

ZTE Z80 Ultra has a system interface permission verification defect

ZTE Z80 Ultra has a system interface permission verification defect. The interface lacks necessary access control, and relevant information can be read by reflectively invoking the interface.

▾ SunlitZTE · ZTE Z80 UltraEPSS 0.16%via NVD
z80_ultra vulnerabilities (CVEs) · VulnSea