{"uuid": "206df9b2-5ba1-4e75-8f29-4c048c22781e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34474", "type": "seen", "source": "https://t.me/hacking_Attack/185838", "content": "CVE-2026-34474 is a good example of why router testing should not stop at the login form. On affected ZTE H298A / H108N builds, an old ETHCheat path returned sensitive config fields before authentication. The interesting part was not the UI, but the raw HTML coming back from the router. Admin/WLAN fields were sitting in the response on the tested builds, with serial info exposed through a related wizard path.    submitted by    /u/TheReedemer69  (https://www.reddit.com/user/TheReedemer69) \n [link] (https://minanagehsalalma.github.io/cve-2026-34474-zte-h298a-h108n-sensitive-data-exposure/)   [comments] (https://www.reddit.com/r/Pentesting/comments/1tjq2dn/cve202634474_finding_router_credential_exposure/)", "creation_timestamp": "2026-09-01T20:00:10.386671Z"}