CVE-2026-86555 — Hardcoded Key Vulnerability in ZTE SmartLife APP

CVE-2026-86555

Hardcoded Key Vulnerability in ZTE SmartLife APP PUBLISHED

Description (CNA)

The ZTE SmartLife application has a hardcoded key. The key used to decrypt account server information is stored in plaintext in the code. Once the key is obtained, the server information can be decrypted, thus exposing it.

Affected (CNA)

Vendor / product	Versions
ZTE / SmartLife	affected ZTE_SL_V2.8.2_ABROAD and earlier versions

CWE

CWE-798

References

https://support.zte.com.cn/zte-iccp-isupport-webui/bulletin/detail/874505866159007054

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.