Skip to content
OpenAdvisories

Product · ZTE

SmartLife

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.2
    CVE-2026-86555

    Hardcoded Key Vulnerability in ZTE SmartLife APP

    The ZTE SmartLife application has a hardcoded key. The key used to decrypt account server information is stored in plaintext in the code. Once the key is obtained, the server information can be decrypted, thus exposing it.

    ZTE SmartLife
  • Medium 4.3
    CVE-2026-86554

    Email enumeration and account ID leakage vulnerabilities in ZTE SmartLife APP

    SmartLife app dynamically generates brand‑new SmartLife application authentication parameters within its runtime process. With the obtained SmartLife application authentication parameters, attackers can directly invoke the backend interface /account/verify.se…

    ZTE SmartLife
  • Medium 5.4
    CVE-2026-86552 Public exploit

    A vulnerability that skips email ownership verification for account registration in ZTE SmartLife APP

    SmartLife app dynamically generates brand‑new SmartLife application authentication parameters at runtime. With the acquired SmartLife application authentication credentials, an attacker can directly complete registration using any arbitrary email address via …

    ZTE SmartLife