CVE-2026-86555
The ZTE SmartLife application has a hardcoded key. The key used to decrypt account server information is stored in plaintext in the code. Once the key is obtained, the server information can be decrypted, thus exposing it.
타임라인
벡터: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
🎭 이 CVE, 다음 위협조직 관련 보도와 함께 언급됨: Kimsuky Scattered Spider