Skip to content
CVE PROGRAM SOURCE RECORD5.0 Medium

CVE-2026-40002

ZTE Red Magic 11 Pro (NX809J) contains a vulnerability that allows non-privileged applications to trigger sensitive operations.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
zte

Description

Red Magic 11 Pro (NX809J) contains a vulnerability that allows non-privileged applications to trigger sensitive operations. The vulnerability stems from the lack of validation for applications accessing the service interface. Exploiting this vulnerability, an attacker can write files to specific partitions and set writable system properties.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ZTE Red Magic 11 Pro (NX809J)

Default version status: unaffected

  • GEN_NEEA_NX809J V1.0.0B14MR1 to ≤ V1.0.0B14MR1affected

References