Medium severity6.2NVD Advisory· Published Sep 20, 2026· Updated Sep 22, 2026
CVE-2026-86555
CVE-2026-86555
Description
The ZTE SmartLife application has a hardcoded key. The key used to decrypt account server information is stored in plaintext in the code. Once the key is obtained, the server information can be decrypted, thus exposing it.
Affected products
2Patches
Vulnerability mechanics
References
1News mentions
3- ⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware ArrestsThe Hacker News · Oct 5, 2026
- ⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More ThreatsThe Hacker News · Sep 28, 2026
- ZTE SmartLife Flaws Let Attackers Hijack Accounts by Resetting Passwords Without VerificationCyber Security News · Sep 22, 2026