Search vulnerabilities

Results 2

Export CSV
CVE-2026-86555

Hardcoded Key Vulnerability in ZTE SmartLife APP

The ZTE SmartLife application has a hardcoded key. The key used to decrypt account server information is stored in plaintext in the code. Once the key is obtained, the server information can be decrypted, thus exposing it.

CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
Zte
Products
CVE-2026-8029

SQL Injection Vulnerability in ZTE SmartLife App

The ZTE Smart Life app contains an SQL injection vulnerability that allows attackers to execute UNION SELECT statements to query sensitive data in the feedback.db database across tables, including user accounts, phone numbers, feedback content, and local debug log paths, thereby enabling the theft of local privacy data.

CVSS 3.1 · 3.9 Low EPSS < 1% KEV · Not listed
Vendors
Zte
Products