CVE-2026-40002

Red Magic 11 Pro (NX809J) contains a vulnerability that allows non-privileged applications to trigger sensitive operations. The vulnerability stems from the lack of validation for applications accessing the service interface. Exploiting this vulnerability, an attacker can write files to specific partitions and set writable system properties.

CVSS v3 5.0 MEDIUM

5.0^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.8 / Impact : 3.7

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope CHANGED

References

Link	Resource
https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/8224335890517684583	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:zte:nubia-in_nx809j_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:zte:nubia-in_nx809j:-:*:*:*:*:*:*:*

History

26 Oct 2026, 22:10

Type	Values Removed	Values Added
Summary		(es) Red Magic 11 Pro (NX809J) contiene una vulnerabilidad que permite a las aplicaciones no privilegiadas activar operaciones sensibles. La vulnerabilidad radica en la falta de validación para las aplicaciones que acceden a la interfaz de servicio. Al explotar esta vulnerabilidad, un atacante puede escribir archivos en particiones específicas y establecer propiedades de sistema escribibles.

Information

Published : 2026-04-17 08:16

Updated : 2026-10-26 22:10

NVD link : CVE-2026-40002

Mitre link : CVE-2026-40002

CVE.ORG link : CVE-2026-40002

JSON object : View

Products Affected

zte

nubia-in_nx809j_firmware
nubia-in_nx809j

CWE

CWE-269

Improper Privilege Management

NVD-CWE-noinfo

{"id": "CVE-2026-40002", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-40002", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-17T12:11:30.065966Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@zte.com.cn", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.0, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 3.7, "exploitabilityScore": 0.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.0}]}, "affected": [{"source": "psirt@zte.com.cn", "affectedData": [{"vendor": "ZTE", "product": "Red Magic 11 Pro (NX809J)", "versions": [{"status": "affected", "version": "GEN_NEEA_NX809J V1.0.0B14MR1", "versionType": "custom", "lessThanOrEqual": "V1.0.0B14MR1"}], "defaultStatus": "unaffected"}]}], "published": "2026-04-17T08:16:18.120", "references": [{"url": "https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/8224335890517684583", "tags": ["Vendor Advisory"], "source": "psirt@zte.com.cn"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@zte.com.cn", "description": [{"lang": "en", "value": "CWE-269"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Red Magic 11 Pro (NX809J)\u00a0contains a vulnerability that allows non-privileged applications to trigger sensitive operations. The vulnerability stems from the lack of validation for applications accessing the service interface. Exploiting this vulnerability, an attacker can write files to specific partitions and set writable system properties."}, {"lang": "es", "value": "Red Magic 11 Pro (NX809J) contiene una vulnerabilidad que permite a las aplicaciones no privilegiadas activar operaciones sensibles. La vulnerabilidad radica en la falta de validaci\u00f3n para las aplicaciones que acceden a la interfaz de servicio. Al explotar esta vulnerabilidad, un atacante puede escribir archivos en particiones espec\u00edficas y establecer propiedades de sistema escribibles."}], "lastModified": "2026-10-26T22:10:00.163", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:zte:nubia-in_nx809j_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "08FC4588-5DB4-432B-9D82-EED2D7FE2294", "versionEndExcluding": "GEN_NEEA_NX809JV1.0.0B16MR1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:zte:nubia-in_nx809j:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F89C0115-1F2F-4FE0-96BA-D14C3F7E3F05"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@zte.com.cn"}