Skip to content
CVE PROGRAM SOURCE RECORD1.8 Low

CVE-2026-40000

Path Traversal Vulnerability in ZTE Blade A75 5G

Description

The Activity zte.com.cn.filer/zte.com.cn.filer.FilePreViewActivity within ZTE File Manager is designed to preview compressed files. Third-party applications can launch this Activity and supply arbitrary file paths (e.g., content://zte.com.cn.filer.fileprovider/root_path), enabling file access with the privilege level of ZTE File Manager. This allows unrooted devices to read files under certain system directories such as /data/data and /data/local/tmp. If access restrictions do not block untrusted applications, additional directories may also be accessible.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ZTE Blade A75 5G

Default version status: unaffected

  • A75 series project, versions released before 2026/05/30affected

References