CVE-2026-40002

Red Magic 11 Pro (NX809J) contains a vulnerability that allows non-privileged applications to trigger sensitive operations. The vulnerability stems from the lack of validation for applications accessing the service interface. Exploiting this vulnerability, an attacker can write files to specific partitions and set writable system properties.

CVSS v3 5.0 MEDIUM

5.0^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.8 / Impact : 3.7

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope CHANGED

References

Link	Resource
https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/8224335890517684583	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:zte:nubia-in_nx809j_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:zte:nubia-in_nx809j:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2026-04-17 08:16

Updated : 2026-07-08 03:29

NVD link : CVE-2026-40002

Mitre link : CVE-2026-40002

CVE.ORG link : CVE-2026-40002

JSON object : View

Products Affected

zte

nubia-in_nx809j_firmware
nubia-in_nx809j

CWE

CWE-269

Improper Privilege Management

NVD-CWE-noinfo

{"id": "CVE-2026-40002", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-40002", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-17T12:11:30.065966Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@zte.com.cn", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.0, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 3.7, "exploitabilityScore": 0.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.0}]}, "affected": [{"source": "psirt@zte.com.cn", "affectedData": [{"vendor": "ZTE", "product": "Red Magic 11 Pro (NX809J)", "versions": [{"status": "affected", "version": "GEN_NEEA_NX809J V1.0.0B14MR1", "versionType": "custom", "lessThanOrEqual": "V1.0.0B14MR1"}], "defaultStatus": "unaffected"}]}], "published": "2026-04-17T08:16:18.120", "references": [{"url": "https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/8224335890517684583", "tags": ["Vendor Advisory"], "source": "psirt@zte.com.cn"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@zte.com.cn", "description": [{"lang": "en", "value": "CWE-269"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Red Magic 11 Pro (NX809J)\u00a0contains a vulnerability that allows non-privileged applications to trigger sensitive operations. The vulnerability stems from the lack of validation for applications accessing the service interface. Exploiting this vulnerability, an attacker can write files to specific partitions and set writable system properties."}], "lastModified": "2026-07-08T03:29:04.650", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:zte:nubia-in_nx809j_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "08FC4588-5DB4-432B-9D82-EED2D7FE2294", "versionEndExcluding": "GEN_NEEA_NX809JV1.0.0B16MR1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:zte:nubia-in_nx809j:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F89C0115-1F2F-4FE0-96BA-D14C3F7E3F05"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@zte.com.cn"}