MEDIUM 4.3 NVD

CVE-2026-86554

SmartLife app dynamically generates brand‑new SmartLife application authentication parameters within its runtime process. With the obtained SmartLife applicatio

SmartLife app dynamically generates brand‑new SmartLife application authentication parameters within its runtime process. With the obtained SmartLife application authentication parameters, attackers can directly invoke the backend interface /account/verify.serv to determine whether a target email address is registered for a SmartLife account. If the account exists, the real backend account ID can also be retrieved.

References

https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/2171542593031840113

Published: 2026-09-20 · Source: NVD · Feed updated: 2026-09-20

This medium severity vulnerability with a CVSS score of 4.3 was published on 2026-09-20 via NVD.

vulnfeed aggregates 14846 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.