What is GHSA-f7mj-qxpc-pc3x?

GHSA-f7mj-qxpc-pc3x is a security advisory published by GitHub Security Advisories with Medium severity. ZTE Z80 Ultra's system interfaces do not have robust invocation authentication, with inadequate...

Which CVE IDs does GHSA-f7mj-qxpc-pc3x cover?

GHSA-f7mj-qxpc-pc3x covers the following CVE IDs: CVE-2026-108506. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-f7mj-qxpc-pc3x?

GHSA-f7mj-qxpc-pc3x has a CVSS v3 base score of 5.5, published by GitHub Security Advisories.

GHSA-f7mj-qxpc-pc3xMediumCVSS 5.5

ZTE Z80 Ultra's system interfaces do not have robust invocation authentication, with inadequate...

Vendor

GitHub Security Advisories

Published

October 10, 2026

Last Modified

October 10, 2026

🔗 CVE IDs covered (1)

CVE-2026-108506 →

📋 Description

ZTE Z80 Ultra's system interfaces do not have robust invocation authentication, with inadequate access control. Third-party apps may call the interfaces through reflection and retrieve relevant information.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-108506
https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/7927166620923281253
https://github.com/advisories/GHSA-f7mj-qxpc-pc3x