CVE-2026-40436

CVE-2026-40436 is a password reset vulnerability affecting the ZTE ZXEDM iEMS product, specifically within its cloud EMS portal management interface. The vulnerability stems from improper access controls on the user list acquisition function, enabling attackers to enumerate all user accounts in the system. Once obtained, attackers can reset passwords for any user, granting unauthorized access and enabling malicious operations within the platform. The vulnerability carries a CVSS score of 7.1 (HIGH), with a network-based attack vector requiring low privileges and user interaction. The impact spans confidentiality, integrity, and availability, meaning successful exploitation could result in unauthorized data access, system modification, and service disruption. However, the attack requires some complexity and user interaction to execute effectively. This vulnerability does not appear on the CISA Known Exploited Vulnerabilities catalog and remains inactive on public exploit tracking lists. The EPSS score of 0.0004 indicates minimal probability of exploitation in the wild relative to other disclosed vulnerabilities. Community attention remains low, suggesting limited immediate threat, though organizations running ZTE ZXEDM iEMS should implement access controls and credential management safeguards as a precaution.