CVE-2026-86553: A password reset vulnerability in ZTE SmartLife APP
SmartLife app dynamically generates fresh SmartLife application authentication parameters inside its runtime process. Using the acquired SmartLife application authentication parameters, an attacker can directly call the backend interface /account/verify.serv to obtain the real account ID corresponding to a registered email address. By spoofing the application authentication information together with the target account ID, the attacker can reset the password of the target account.
Affected Software
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
The attacker needs SmartLife application authentication parameters obtained from the app runtime process, a registered target email address to retrieve the associated account ID, and the ability to spoof the application authentication information with that account ID.
Is user interaction required for exploitation?
No. The supplied vector indicates no user interaction is required, and the described attack uses backend interface calls to obtain an account ID and reset the password.
What is the likely impact after successful exploitation?
An attacker can reset the password for a target SmartLife account, which can enable account takeover. The supplied severity vector indicates high confidentiality impact and low integrity impact.