Authentication Vulnerability in SmartLife App by ZTE

CVE-2026-86553

What is CVE-2026-86553?

The SmartLife app contains an authentication flaw that allows attackers to generate valid authentication parameters during runtime. By exploiting this vulnerability, an attacker can access the backend interface to verify accounts and obtain real account IDs associated with registered email addresses. This poses a significant risk as it enables the attacker to subsequently reset passwords and gain unauthorized access to user accounts.

References