Zxcloud Irai
Vendor:
First CVE: Dec 20, 2018 · Active for 7 years
13
Total CVEs
More Total CVEs than 92% of tracked products
2.6
Avg CVEs / Year
Higher CVE frequency than 78% of tracked products
7.3
Avg CVSS
Higher Avg CVSS than 50% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Zxcloud Irai over time
Volume of CVEsAvg CVSS Base Score
First CVE
Dec 20, 2018
7 years ago
Most Recent CVE
May 7, 2026
82 days ago
CVE Severity & Scoring
Zxcloud Irai13 CVEs
23%
77%
All CVEs353,240 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local9 (69.2%)
Network4 (30.8%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low13 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None11 (84.6%)
Unknown0 (0.0%)
Required2 (15.4%)
Privileges Required
Low10 (76.9%)
High1 (7.7%)
None2 (15.4%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (13 CVEs).
13 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-44406HIGH ZTE Cloud PC client uSmartView contains a DLL hijacking vulnerability; since uSmartViewServiceAgent.exe runs with SYSTEM privileges, successful hijacking enables local arbitrary co | May 7, 2026 | 7.8 | 28 | NO | NO |
CVE-2026-40004HIGH There exists an openssl.cnf privilege escalation vulnerability in ZTE Cloud PC client uSmartview. An attacker can execute arbitrary code locally and escalate privileges. | May 7, 2026 | 7.8 | 28 | NO | NO |
CVE-2026-44407HIGH A remote denial-of-service vulnerability exists in the ZTE Cloud PC client uSmartview, which may lead to memory corruption and remote denial of service. | May 7, 2026 | 7.5 | 27 | NO | NO |
CVE-2021-21731HIGH A CSRF vulnerability exists in the management page of a ZTE product.The vulnerability is caused because the management page does not fully verify whether the request comes from a t | Apr 13, 2021 | 8.1 | 24 | NO | NO |
CVE-2024-22062HIGH There is a permissions and access control vulnerability in ZXCLOUD IRAI.An attacker can elevate non-administrator permissions to administrator permissions by modifying the configur | Jul 9, 2024 | 8.8 | 23 | NO | NO |
CVE-2018-7365HIGH All versions up to ZXCLOUD iRAI V5.01.05 of the ZTE uSmartView product are impacted by untrusted search path vulnerability, which may allow an unauthorized user to perform unauthor | Dec 20, 2018 | 7.2 | 23 | NO | NO |
CVE-2023-41783HIGH There is a command injection vulnerability of ZTE's ZXCLOUD iRAI. Due to the program failed to adequately validate the user's input, an attacker could exploit this vulnerability | Jan 3, 2024 | 7.8 | 22 | NO | NO |
CVE-2023-41780HIGH There is an unsafe DLL loading vulnerability in ZTE ZXCLOUD iRAI. Due to the program failed to adequately validate the user's input, an attacker could exploit this vulnerability | Jan 3, 2024 | 7.8 | 22 | NO | NO |
CVE-2023-41776HIGH There is a local privilege escalation vulnerability of ZTE's ZXCLOUD iRAI.Attackers with regular user privileges can create a fake process, and to escalate local privileges.
| Jan 3, 2024 | 7.8 | 22 | NO | NO |
CVE-2023-25648HIGH
There is a weak folder permission vulnerability in ZTE's ZXCLOUD iRAI product. Due to weak folder permission, an attacker with ordinary user privileges could construct a fake DLL | Dec 14, 2023 | 7.8 | 22 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (13 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (13 CVEs).
Media Mentions
Signals from CVEs in this product scope (13 CVEs).
Top CNAs Publishing CVEs For Zxcloud Irai
Top CWEs
Versions
No cataloged versions.