![AttackFeed by Joe Wagner | [SECURITY ADVISORY] CVE-2026-34474 - ZTE H298A/H108N Unauthenticated Admin Credential Exposure - Full Disclosure](https://attackfeed.com/wp-content/uploads/2026/05/fulldisclosure-img-rInpGC.png "[SECURITY ADVISORY] CVE-2026-34474 – ZTE H298A/H108N Unauthenticated Admin Credential Exposure")
Posted by m.nageh on May 25
—–BEGIN SECURITY ADVISORY—–
Advisory ID: MONX-2026-003
CVE ID: CVE-2026-34474
Title: ZTE ZXHN H298A / H108N – Unauthenticated Admin Password &
WLAN Credential Exposure
Affected: ZTE ZXHN H298A 1.1, ZTE ZXHN H108N 2.6 (EOL; no patch
planned)
Date: 2026-05-20
Author: Mina Nageh Salalma (Monx Research)
Contact: minanageh379 () gmail com
Public URL:…
– Read More – Full Disclosure
![AttackFeed by Joe Wagner | [KIS-2026-07] SocialEngine](https://attackfeed.com/wp-content/uploads/2026/04/fulldisclosure-img-t6Ehd0.webp "[KIS-2026-07] SocialEngine <= 7.8.0 Blind Server-Side Request Forgery Vulnerability")
![AttackFeed by Joe Wagner | [CVE-2026-33691] OWASP CRS whitespace padding bypass vulnerability - Full Disclosure](https://attackfeed.com/wp-content/uploads/2026/04/fulldisclosure-img-d1d1in.png "[CVE-2026-33691] OWASP CRS whitespace padding bypass vulnerability")