{"uuid": "db20b0cb-527e-4b13-939a-2cec9f3240fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34472", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/185826", "content": "https://minanagehsalalma.github.io/cve-2026-34472-auth-bypass-zte-h188a-router/\n \n I wrote up CVE-2026-34472, an authentication bypass in the ZTE H188A V6 router. The interesting pentest angle is that the issue was not a classic brute-force/default-password case. The router exposed sensitive setup-wizard data before authentication because of a routing flaw. That leaked enough information to cross into the authenticated management interface. The post covers:  how the auth boundary was bypassed what made the pre-login wizard reachable firmware/root-cause analysis disclosure timeline lessons for testing embedded web interfaces     submitted by    /u/TheReedemer69  (https://www.reddit.com/user/TheReedemer69) \n [link] (https://i.redd.it/nyigo5ycka2h1.png)   [comments] (https://www.reddit.com/r/Pentesting/comments/1tina91/cve202634472_router_auth_bypass_from_a_prelogin/)", "creation_timestamp": "2026-09-02T01:00:19.413774Z"}