CVE-2026-86555
Received Received - Intake

Hardcoded Key in ZTE SmartLife Application

Publication date: 2026-09-20

Last updated on: 2026-09-20

Assigner: ZTE Corporation

Description
The ZTE SmartLife application has a hardcoded key. The key used to decrypt account server information is stored in plaintext in the code. Once the key is obtained, the server information can be decrypted, thus exposing it.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-20
Last Modified
2026-09-20
Generated
2026-09-20
AI Q&A
2026-09-20
EPSS Evaluated
N/A
NVD
CVE-2026-86555
EUVD
EUVD-2026-83717

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
zte smartlife *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-798 The product contains hard-coded credentials, such as a password or cryptographic key.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

The ZTE SmartLife application contains a hardcoded key in its code. This key is used to decrypt server information for user accounts. Since the key is stored in plaintext, attackers can easily retrieve it and decrypt sensitive server data.

Detection Guidance

This vulnerability involves a hardcoded key in the ZTE SmartLife application. Detection requires inspecting the application's code or binary for plaintext keys. Use tools like strings, grep, or a decompiler to search for hardcoded keys in the app's files or network traffic.

Impact Analysis

If exploited, this vulnerability could allow unauthorized access to your account server information. Attackers might decrypt and steal sensitive data, leading to privacy breaches or further attacks on your accounts.

Compliance Impact

This vulnerability likely violates data protection requirements under GDPR and HIPAA due to unauthorized access to personal or health information. Organizations using this app may face compliance violations, legal penalties, and reputational damage.

Mitigation Strategies

Immediately update the ZTE SmartLife application to the latest version if an update is available. Avoid using the application until it is updated. Review network traffic for unusual decryption activities or unauthorized server access attempts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-86555. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart