CVE-2026-86555

Medium6.2 Published on Sep 20, 2026

The ZTE SmartLife application has a hardcoded key. The key used to decrypt account server information is stored in plaintext in the code. Once the key is obtained, the server information can be decrypted, thus exposing it.

CVSS score6.2 / 10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness type (CWE)CWE-798

Vulnerabilities

FortiMail and NetScaler Exploitation Drives an Urgent Enterprise Patch Cycle

FortiMail path traversal and NetScaler SAML flaw under active exploit join CISA KEV, forcing urgent patching plus PHP, PaperCut and Spectre fixes.

Oct 5, 202619:36 7 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

FortiMail and NetScaler Exploitation Drives an Urgent Enterprise Patch Cycle