CVE-2026-34472: Pre

Reddit •/u/TheReedemer69 • May 20, 2026

I published a technical analysis of CVE-2026-34472, a pre-authentication credential exposure and authentication bypass in the ZTE H188A V6 router. Root cause: a routing flaw allows unauthenticated access to logic intended for the pre-login setup wizard. The exposed flow returns sensitive configuration values, including WLAN and admin-related credentials, which can then be used to cross the authentication boundary. The writeup includes: affected component analysis decompiled firmware review Lua/CGILua control-flow notes disclosure timeline PoC repository submitted by /u/TheReedemer69 [link] [ ]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Disclose Pre-auth Credential Exposure in ZTE Routers CVE-2026-34472 and CVE-2026-34474 reveal critical pre-authentication credential exposure vulnerabilities in ZTE routers. CVE-2026-34472 affects the ZTE H188A V6 router, allowing unauthenticated access to sensitive configuration values. CVE-2026-34474 impacts the ZTE ZXHN H298A and H108N routers, where an ETHCheat branch exposes credential-bearing HTML before authentication. Both vulnerabilities were published in March and May 2026, with the first public proof of concept (PoC) released on May 19, 2026. The flaws enable attackers to retrieve admin credentials and WLAN settings, posing significant risks to network security. Users of affected ZTE router models are advised to take immediate action to mitigate the risks. The PoC for both vulnerabilities was submitted by the same user, indicating a coordinated disclosure effort. 3 sources 71

Extracted Entities

CVE-2026-34472: Pre

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Platforms (1)