CVE-2026-44407
MediumCVSS 4.7Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
A remote denial-of-service vulnerability exists in the ZTE Cloud PC client uSmartview, which may lead to memory corruption and remote denial of service. The description does not provide technical details or affected versions.
Risk Assessment
A remote attacker could trigger memory corruption and denial of service in the uSmartview client, disrupting remote desktop users. The result may be service unavailability or client application instability.
Recommendation
Monitor ZTE security bulletins and apply the available uSmartview client update. Limit the client's network exposure and apply network segmentation.
Other vulnerabilities in ZTE uSmartview
See all- CVE-2026-44406Medium
ZTE Cloud PC client uSmartView contains a DLL hijacking vulnerability. Since uSmartViewServiceAgent.exe runs with SYSTEM privileges, successful hijacking enables local arbitrary code execution, privilege escalation, and memory corruption.
- CVE-2026-40004Medium
There is an openssl.cnf privilege escalation vulnerability in the ZTE Cloud PC client uSmartview. An attacker can execute arbitrary code locally and escalate privileges.
Original NVD description (English source)
A remote denial-of-service vulnerability exists in the ZTE Cloud PC client uSmartview, which may lead to memory corruption and remote denial of service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS