Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2025-46581

ZTE ZXCDN product has a Struts RCE Vulnerability

Description

ZTE's ZXCDN product is affected by a Struts remote code execution (RCE) vulnerability. An unauthenticated attacker can remotely execute commands with non-root privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ZTE ZXCDN

Default version status: unaffected

  • ZXCDN-SNS V3.01.02affected

References