VULNERABILITY INTELLIGENCE

CVE-2026-40002

CVSS score5 MEDIUM
EPSS probability0.12%
CISA KEVNot currently listed
Published2026-04-17
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L

Description

Red Magic 11 Pro (NX809J) contains a vulnerability that allows non-privileged applications to trigger sensitive operations. The vulnerability stems from the lack of validation for applications accessing the service interface. Exploiting this vulnerability, an attacker can write files to specific partitions and set writable system properties.

Weakness classification

  • psirt@zte.com.cn: CWE-269
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references