CVE-2026-40002
ZTE Red Magic 11 Pro (NX809J) contains a vulnerability that allows non-privileged applications to trigger sensitive operations.
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 5EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
17 Apr 2026Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Red Magic 11 Pro (NX809J) contains a vulnerability that allows non-privileged applications to trigger sensitive operations. The vulnerability stems from the lack of validation for applications accessing the service interface. Exploiting this vulnerability, an attacker can write files to specific partitions and set writable system properties.
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
Affected products
ZTE · Red Magic 11 Pro (NX809J)Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →