CVEvulnerability

CVE-2026-86554

4.3 MEDIUM Published 2026-09-20 Modified 2026-09-22 Official page ↗
Status
Deferred
Published
2026-09-20
Last modified
2026-09-22
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-269

Description

SmartLife app dynamically generates brand‑new SmartLife application authentication parameters within its runtime process. With the obtained SmartLife application authentication parameters, attackers can directly invoke the backend interface /account/verify.serv to determine whether a target email address is registered for a SmartLife account. If the account exists, the real backend account ID can also be retrieved.

Related

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References