CVE-2026-40436 | ZTE ZXEDM iEMS ElasticNet_UME_R32_V16.25.42.04 User List Interface password recovery

A vulnerability classified as problematic has been found in ZTE ZXEDM iEMS ElasticNet_UME_R32_V16.25.42.04. This issue affects some unknown processing of the component User List Interface. This manipulation causes weak password recovery.

This vulnerability is tracked as CVE-2026-40436. The attack is possible to be carried out remotely. No exploit exists.