{"uuid": "87f6fcb3-0b77-4973-914e-d6c1f9fa604e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34474", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/185838", "content": "CVE-2026-34474 is a good example of why router testing should not stop at the login form. On affected ZTE H298A / H108N builds, an old ETHCheat path returned sensitive config fields before authentication. The interesting part was not the UI, but the raw HTML coming back from the router. Admin/WLAN fields were sitting in the response on the tested builds, with serial info exposed through a related wizard path.    submitted by    /u/TheReedemer69  (https://www.reddit.com/user/TheReedemer69) \n [link] (https://minanagehsalalma.github.io/cve-2026-34474-zte-h298a-h108n-sensitive-data-exposure/)   [comments] (https://www.reddit.com/r/Pentesting/comments/1tjq2dn/cve202634474_finding_router_credential_exposure/)", "creation_timestamp": "2026-09-02T01:00:19.776025Z"}