ZTE Smartlife
5 CVEs affecting ZTE Smartlife. Latest disclosed: 2026-09-20. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-86553 | High | 8.8 | 2026-09-20 | SmartLife app dynamically generates fresh SmartLife application authentication parameters inside its runtime process. Using the acquired SmartLife application… |
CVE-2026-86555 | Medium | 6.2 | 2026-09-20 | The ZTE SmartLife application has a hardcoded key. The key used to decrypt account server information is stored in plaintext in the code. Once the key is obtai… |
CVE-2026-86552 | Medium | 5.4 | 2026-09-20 | SmartLife app dynamically generates brand‑new SmartLife application authentication parameters at runtime. With the acquired SmartLife application authenticatio… |
CVE-2026-86554 | Medium | 4.3 | 2026-09-20 | SmartLife app dynamically generates brand‑new SmartLife application authentication parameters within its runtime process. With the obtained SmartLife applicati… |
CVE-2026-8029 | Low | 3.9 | 2026-08-05 | The ZTE Smart Life app contains an SQL injection vulnerability that allows attackers to execute UNION SELECT statements to query sensitive data in the feedback… |