CVE-2026-86555CWE-798hardcoded-credentials
CVE-2026-86555
Medium · published September 20, 2026
What it is
The ZTE SmartLife application has a hardcoded key. The key used to decrypt account server information is stored in plaintext in the code. Once the key is obtained, the server information can be decrypted, thus exposing it.
The record
Technical detail
- CVSS v3.1
- 6.2 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00204 · 9.8th percentile
- Weakness
- CWE-798 · Use of Hard-coded Credentials
- Published
- 2026-09-20T14:16Z
References (1)
EPSS history
Timeline