Approved changes feed: RSS · Atom

cpe:2.3:a:zte:smartlife:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorZte (a03dfd9f-ec80-5d2d-8d2d-86a72c3ab055)
ProductSmartlife (bd9f71f2-0ab6-523c-890b-4a3bb4afcd9f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-86555 vulnerable 2026-10-13 12:28:46.311725 Hardcoded Key Vulnerability in ZTE SmartLife APP
MEDIUM (6.2)
The ZTE SmartLife application has a hardcoded key. The key used to decrypt account server information is stored in plaintext in the code. Once the key is obtained, the server information can be decrypted, thus exposing it.
Published: 2026-09-20T09:15:43.868Z
Updated: 2026-09-21T18:05:58.744Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8029 vulnerable 2026-09-16 04:32:57.511116 SQL Injection Vulnerability in ZTE SmartLife App
LOW (3.9)
The ZTE Smart Life app contains an SQL injection vulnerability that allows attackers to execute UNION SELECT statements to query sensitive data in the feedback.db database across tables, including user accounts, phone numbers, feedback content, and local debug log paths, thereby enabling the theft of local privacy data.
Published: 2026-08-05T08:36:02.928Z
Updated: 2026-08-05T13:06:32.148Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.