CVE-2026-8029: SQL Injection Vulnerability in ZTE SmartLife App
Published Aug 5, 2026
·Updated
The ZTE Smart Life app contains an SQL injection vulnerability that allows attackers to execute UNION SELECT statements to query sensitive data in the feedback.db database across tables, including user accounts, phone numbers, feedback content, and local debug log paths, thereby enabling the theft of local privacy data.
Affected Software
1 affected component
ZTE SmartLife app
Event History
Aug 5, 2026
CVE Published
via MITRE·08:36 AM
Data Sourced
via MITRE·08:36 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:18 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-8029?
CVE-2026-8029 has a severity rating of low, with a score of 3.9.
2
How do I fix CVE-2026-8029?
To address CVE-2026-8029, update the ZTE SmartLife app to the latest version that resolves the SQL injection vulnerability.
3
What type of vulnerability is CVE-2026-8029?
CVE-2026-8029 is classified as an SQL Injection vulnerability.
4
What data can be compromised due to CVE-2026-8029?
CVE-2026-8029 can potentially expose sensitive data such as user accounts, phone numbers, and feedback content.
5
Which application is affected by CVE-2026-8029?
The ZTE SmartLife app is the affected application in CVE-2026-8029.