Skip to content
OpenAdvisories
Medium · 6.2 CVE-2026-86555 EUVD-2026-83717GHSA-6rhq-q57h-9phf

Hardcoded Key Vulnerability in ZTE SmartLife APP

Published Sep 20, 2026 · Updated Sep 21, 2026 · Assigned by zte

Description

The ZTE SmartLife application has a hardcoded key. The key used to decrypt account server information is stored in plaintext in the code. Once the key is obtained, the server information can be decrypted, thus exposing it.

Affected products

VendorProductAffectedFixed
ZTE SmartLife ZTE_SL_V2.8.2_ABROAD and earlier versions —

References