CVE-2026-49004

{
  "id": "CVE-2026-49004",
  "sourceIdentifier": "[email protected]",
  "published": "2026-08-05T07:16:37.333",
  "lastModified": "2026-10-24T16:10:00.153",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The built-in PostgreSQL service on the mobile device suffers from misconfiguration flaws and command injection vulnerabilities. This service listens on a specific port, runs with root privileges, and is protected by weak credentials. The database supports the COPY FROM PROGRAM syntax, allowing local attackers to bypass Android's permission sandbox and gain full root access."
    },
    {
      "lang": "es",
      "value": "El servicio PostgreSQL integrado en el dispositivo móvil sufre de fallos de configuración incorrecta y vulnerabilidades de inyección de comandos. Este servicio escucha en un puerto específico, se ejecuta con privilegios de root y está protegido por credenciales débiles. La base de datos soporta la sintaxis COPY FROM PROGRAM, permitiendo a atacantes locales eludir el sandbox de permisos de Android y obtener acceso root completo."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "ZTE",
          "product": "NX799J (Red Magic 11 Air)",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "GEN_CN_NX799JV1.0.0B15",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L",
          "baseScore": 6.5,
          "baseSeverity": "MEDIUM",
          "attackVector": "PHYSICAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "CHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "LOW",
          "availabilityImpact": "LOW"
        },
        "exploitabilityScore": 0.7,
        "impactScore": 5.3
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-08-05T13:52:51.358873Z",
          "id": "CVE-2026-49004",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-89"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/460174866982027405",
      "source": "[email protected]"
    }
  ]
}