CVE-2026-86555 | BDVDB-2026-377185 Detail
ZTESmartLife
Description#
The ZTE SmartLife application has a hardcoded key. The key used to decrypt account server information is stored in plaintext in the code. Once the key is obtained, the server information can be decrypted, thus exposing it.
Impact#
CAPEC-115 Authentication Bypass
Weaknesses#
- CWE-798 Use of Hard-coded Credentials
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.