{"vulnerability": "CVE-2026-108506", "sightings": [{"uuid": "853aba7b-4c96-4ecd-8043-cd4293f867c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108506", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117415905444531019", "content": "CVE-2026-108506 Unauthorized access vulnerability in ZTE Z80 Ultra product ZTE Z80 Ultra's system interfaces do not have robust invocation authentication, with inadequate access control. Third-party apps may call the interfaces through reflection and retrieve relevant information.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108506https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/7927166620923281253#zte #ZTE #Z80Ultra#CVE_2026_108506#bot", "creation_timestamp": "2026-10-10T09:28:54.408041Z"}]}