Approved changes feed: RSS · Atom
cpe:2.3:a:zte:ztesw:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Zte (a03dfd9f-ec80-5d2d-8d2d-86a72c3ab055) |
|---|---|
| Product | Ztesw (0596c8e2-292f-5fd5-9d3d-2ab80c601362) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-86552 |
vulnerable | 2026-10-13 12:28:46.669312 |
A vulnerability that skips email ownership verification for account registration in ZTE SmartLife APP
MEDIUM (5.4)
SmartLife app dynamically generates brand‑new SmartLife application authentication parameters at runtime. With the acquired SmartLife application authentication credentials, an attacker can directly complete registration using any arbitrary email address via the backend interface /account/person/signup.serv. Email ownership is not verified prior to registration.
Published: 2026-09-20T03:01:00.618Z
Updated: 2026-09-21T18:10:51.807Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-86553 |
vulnerable | 2026-10-13 12:28:46.481699 |
A password reset vulnerability in ZTE SmartLife APP
HIGH (8.8)
SmartLife app dynamically generates fresh SmartLife application authentication parameters inside its runtime process. Using the acquired SmartLife application authentication parameters, an attacker can directly call the backend interface /account/verify.serv to obtain the real account ID corresponding to a registered email address. By spoofing the application authentication information together with the target account ID, the attacker can reset the password of the target account.
Published: 2026-09-20T03:17:20.888Z
Updated: 2026-09-21T18:10:25.088Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-86554 |
vulnerable | 2026-10-13 12:28:46.254249 |
Email enumeration and account ID leakage vulnerabilities in ZTE SmartLife APP
MEDIUM (4.3)
SmartLife app dynamically generates brand‑new SmartLife application authentication parameters within its runtime process. With the obtained SmartLife application authentication parameters, attackers can directly invoke the backend interface /account/verify.serv to determine whether a target email address is registered for a SmartLife account. If the account exists, the real backend account ID can also be retrieved.
Published: 2026-09-20T07:55:08.842Z
Updated: 2026-09-21T18:07:35.984Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.